Hayden B
Hayden B
Use `go install github.com/sigstore/cosign/v2/cmd/cosign@latest`.
cc @woodruffw
Do you have any plans to use gRPC? If no, (1) seems like a fine approach, though I don't have a sense of how much work that is. Is it...
Do you have any suggestions of alternative implementations of a retryable HTTP client? This might be a bit too in the weeds, but another alternative would be to change how...
At a glance this should be passed, user-provided client secrets have been supported for some time. If someone would like to dig into the code and see where the secret...
Thanks so much for exploring this and starting the conversation, I'm very excited to see this kick off. I'm not very familiar with OCI, so some of these questions will...
> I've done testing with some of those registries: That's pretty decent support. I do wonder if we should first focus on using the referrers tag and skip the referring...
I'm supportive of using the annotation. Anyone else have any suggestions? Overall, LGTM on this proposal. Thanks so much for getting this started! Do you want to submit this as...
cc @jku @kommendorkapten Thoughts? Would be nice if we could get this in before v13, but if not, that's OK, we'll need to do another root signing event once we...
I agree to extending both. I think we should try to leave 2 weeks to handle any issues, so I would say 21 days for the root signing period and...