Results 139 comments of Justin Cappos

@vincentgoat @kevin-wangzefeng @Shelley-BaoYue @Alevsk : We are ready to proceed. As I stated a few weeks ago on slack (and reminded about a few times), I need to speak with...

> Hi, this week I'm available to discuss about the format of documents Okay, what's the best way to connect? Can you message me on CNCF slack (justincappos) to coordinate?

Right. I agree having a local cache of such information is sensible. In my view, so long as we end up with a solution that does not introduce any vulnerabilities...

This seems like an interesting blog post. I'm curious why updating targets / targets metadata and then snapshot doesn't work? My understanding is that users will not know how to...

Witness already does this! https://github.com/in-toto/witness/actions/runs/8147511831/attempts/1#summary-22268394102

poking this issue. Can we make a determination and move forward?

With the above documentation changes, I'm going to resolve this issue.

I'm picking up stale items in the security assessment queue to try to push them forward. Apologies for the delay on your assessment! I took a look and [your self-assessment](https://github.com/cncf/tag-security/pull/1019/files)...

I'm supportive of this in general. What you propose seems quite simple to implement and deploy

We don't have access to update this and merge it. I'll close. Please reopen if someone with the ability to edit this responds and wants to help us merge this.