Strakeln

[Bug]: command-run attestor type complains about missing command

2

**What steps did you take and what happened:** Attempted to generate a command-run attestation, specified the following: `witness run -a command-run -s test -k key.pem -o output.json -- echo "hello"...

Consider Updates to Attestor Type Documentation

2

There doesn't seem to be a place where the attestor type names are specified (for input with `witness run -a`). The attestor types have documentation pages found [here](https://github.com/in-toto/witness/tree/main/docs/attestors), but the...

[Feat]: enhanced debug log level output

1

**Describe the solution you'd like:** When using `debug` log level for `witness verify`, output each step in the verification process for better debugging. The verification process is described [here](https://github.com/in-toto/witness/blob/main/docs/concepts/policy.md#verification-process). If...

ACCESS_MANAGEMENT permission enables user to view all projects

3

### Current Behavior If a user or a team is granted `ACCESS_MANAGEMENT` permission, they are able to view all projects, even if their `VIEW_PORTFOLIO` permission is scoped (via team+portfolio access...