Slavek Kabrda

Hey guys, just FYI, I recently became new maintainer of flexmock and I extended support to 3.4 and 3.5; support for new Python releases will be landing as they come...

I updated the PR to add a test for deserializing and then again serializing a `TrustedRoot` instance and fixed couple minor issues related to that (plus linting issues). The test...

FWIW, it looks like the `.000` in the serialized time is [intentionally stripped](https://github.com/golang/protobuf/blob/b7697bb698b1c56643249ef6179c7cae1478881d/jsonpb/encode.go#L207). I think changing that would be extremely hard and I don't think it's worth it (especially if...

Good point @cmurphy - I added a simple example of a binary that can construct and pretty print a `trusted_root.json` file - let me know what you think!

@steiza @haydentherapper I believe I have now addressed all your concerns and that this should be acceptable. Can I ask you for another round of reviews? FWIW I removed the...

@kommendorkapten thanks again for your review, I just pushed a commit that addresses your points. I also refactored the sorting functionality to functions to avoid copy-paste code (and I realized...

@slimm609 I didn't have time to work on this properly in the past 2 months, but I have some free time on my hands right now, so I'm going to...

@slimm609 after a lot of research I realized that your usecase would need to go through a completely different code path, so I didn't fix that in the PR that...

Hi folks, thank you all for all your hard work on this, this is awesome. I gave this PR a test with the private Sigstore instances that I'm working on...

Hi folks, is one of the aims of this initiative to allow `cosign sign` to output the bundle locally as a single file (instead of pushing it as OCI artifact...