Bob Callaway
Bob Callaway
@lumjjb I’m happy to assist as well.
Agreed that it's not ideal; the merkle leaf hash (which is used to compute the entry ID) isn't known until the server verifies the proposed entry and then canonicalizes it....
I talked a bit more with @haydentherapper today about this... while it is a completely reasonable request, fixing this would break most (if not all) clients out there today to...
What are the thoughts on adding support for the CLI to introspect file type and create a Rekord type entry for a wider set of artifacts? I created the server...
this should be fixed by #973
I will plan to do that for lots of the functional changes, but I would like some feedback on the external APIs if possible.
> I think my problem though was that people don't hold on to EntryUUIDs because they're not in return responses at all yet They are in return responses, just not...
great idea - now that #69 is merged, I will be pushing up a patch to cosign to take advantage of more of the code in `pkg/signature` instead of having...
You can see an example of how it is run within a docker-compose setup at https://github.com/sigstore/rekor/blob/234afe786c8d41aea04818dddd38ffa2e891f56f/tests/issue-872-e2e-test.sh#L64, or checkout github.com/sigstore/scaffolding for how to run under kubernetes. Your command above is trying...
> @bobcallaway - does this help with your maven plugin at all? I know java expects timestamps. I think it could, but need to think more about the sequencing of...