Cody Soyland

I spent some time learning and exploring GRPC as a replacement for certain functions in the handler. The possible benefits of switching to GRPC initially looked very optomistic: 1. Decoupling...

That's interesting, @mcuadros. I haven't heard of proteus, but I will definitely take a close look at it. At first glance, it looks a lot more flexible than the official...

We've had a little discussion about combining the two import urls into a singular handler and locking down the API. I still feel like that might be the best option,...

> Does this mean that Sigstore bundle would contain the canonicalized Rekor entry (and that way it can compute the correct entry body when validating the SET)? Honestly, I think...

@hectorj2f Of course! My proposed change to the yaml is the addition of `signatureFormat` in the `authorities` list. Taking this example from [the docs](https://docs.sigstore.dev/policy-controller/overview/#configuring-policy-that-validates-attestations): ```yaml apiVersion: policy.sigstore.dev/v1beta1 kind: ClusterImagePolicy metadata:...