Hayden B
Hayden B
Something else to explore is rebooting the effort to create a gRPC API (https://github.com/sigstore/rekor/pull/771). We decided to hold off until a 2.0 API, but if there's interest now, we could...
> I think this would also solve my problem, based on my (maybe wrong?) understanding of gRPC: under gRPC, there'd be a set of protobuf definitions that I could generate...
I very much like this idea to use the DB as the source of truth and rely on GCP to guarantee entry upload side effects occur. > Should the API...
https://github.com/sigstore/rekor/issues/286 is the blocker, the pgp library we're using is deprecated but another part of the code depends on it still. At a glance it looks like https://github.com/ProtonMail/go-crypto support ed25519
See the update on the linked issue, we should be able to start using the newer library, but we still need to rely on the deprecated one for RPM packages....
I _think_ we might actually support V4 signatures currently, since I believe x/go/crypto does in addition to V3 signatures. For ed25519, another thing to note is that the hashedrekord Rekor...
Related to https://github.com/sigstore/rekor/issues/1054, the types docs are a bit out of date!
Related is https://github.com/sigstore/rekor/issues/191
@bobcallaway Is this something that needs to be fixed still, or was this resolved with the dsse type?
@cpanato Did you update docs for this?