Justin Cappos

Having a few basic building blocks that we think will be universal may make sense. I'm imagining something like grep or simple rule sets (return value `>=1`). Let's keep adding...

We should also validate TUF with in-toto metadata.... Ray, would you kindly create an issue on the TUF tracker? On Sat, May 14, 2022 at 4:48 AM Ray Chen ***@***.***>...

I think this is a good idea. Perhaps not the highest priority, but definitely good to have. On Tue, Sep 18, 2018 at 11:23 AM Trishank K Kuppusamy < [email protected]>...

Can / will this be reflected in the layout? It seems like the cwd should be explicitly set in the layout and then captured in the generated link metadata...

Okay, these arguments make sense. At some level, there is value in starting to capture broader information about the system where we are running inspections and steps. We've settled into...

I'll comment more (after a shoulder surfing example), but I think there are many subtle things that can be done in the display to make this very clear. On Tue,...

The client should store the latest metadata is has seen and use it when updating. The client should also periodically be updated to ship with recent metadata. These actions help...

Sounds good! Lukas is on vacation, so expect a slight delay in responding to these issues.

I agree this interpretation is correct. I'm also curious what everyone thinks should happen if there is a threshold delegation to A and F as well. Certainly that is worth...

It does make things more difficult in situations where a repository is shared by different users that want to delegate to each other. I'm not sure if PyPI, TAF, or...