Chuang Wang
/assign @wlynch /assign @jerop
/assign @lbernick /assign @ywluogg
Hi @ywluogg , Please take a look. Let me know if you have any comments. Thanks.
Hi @jerop , Please take a look. Thanks.
> I see in the error output it's prefixed with `gcpkms:/` instead of `gcpkms://`. If you add an extra slash, do you still get the error? Hi @haydentherapper , The...
To summarize working v.s. not-working key ref for signing & verification > For verification, `cosign verify-blob --key $KEY_REF --signature ...` is used. 1. no version specified `gcpkms://projects/$PROJECT/locations/$LOCATION/keyRings/$KEYRING/cryptoKeys/$KEY` ✅ works for...
cc @adityasaky @SantiagoTorres @joshuagl @mlieberman85 @priyawadhwa @wlynch
> Adding explicit models for v0.1 and v0.2 right now should be a minor diff, and will probably help us evaluate the work that goes into keeping multiple provenance versions...
Hi @mlieberman85 , sorry for the delay. > In the same vein does also make sense to separate out specific in-toto golang predicates that are supported to its own library?...
> ConfigMaps in the tekton-pipelines-resolvers namespace, containing the relevant fields from git-resolver-config and the unique "name" as an identifier for the provider config. Agreed that this is probably the good...