Hayden B

Results 828 comments of Hayden B

CLI: Verification should support complex policies via a policy file input

Would it be worthwhile creating a verification policy in protobuf-specs? We can start relatively barebones, something like: * List of tuple of (identity, issuer) * Issuer could have aliases for...

CLI: Verification should support complex policies via a policy file input

cc @jku

Support timestamp responses during both signing and verification?

Hey @woodruffw, just wondering, are there any major blockers for this? Is there python support for rfc3161 timestamping?

[tuf] Use trusted_root.json to fetch CTLog/Rekor/

We should also use the newly added expiration information and stop relying on the usage metadata for active vs expired.

Expose signature.Signer hash algorithm

Currently, the hash function is specified per signing (invocation of `Sign` or `SignMessage`), not per `Signer`. Is this proposing allowing you to set the hash function once for the `Signer`?

reusable-release workflow does not use key_ring and key_name inputs

Good catch!

Local Cert verify not working for Azure KMS

@malancas Any guesses? I don't have the environment to repro this.

Create Algorithm Registry API

@kommendorkapten Do you want to take a look at this PR? There's an open question of how this should interact with `PublicKeyDetails` ([thread](https://github.com/sigstore/protobuf-specs/pull/199#issuecomment-1909460347))

Add plugin interface for out-of-tree KMS providers

Two other possible approaches: * Go's [plugin support](https://pkg.go.dev/plugin). This notes that it only works on certain Linux distros and macOS so it's probably not the best approach * kubectl has...

Add plugin interface for out-of-tree KMS providers

The go-plugin library seems like the most promising solution. We haven't started working on this yet. Are you interested in implementing it?