Flavio Castelli
Flavio Castelli
I'm interested in helping with that. As for getting rid of the reqwest dependency, keep in mind that this is a transitive dependency of the following dependencies of sigstore-rs: *...
Sorry, this has been sitting on my review list for a long time. I need some time to get familiar with the feature being implemented :sweat:
Thanks for your feedback @vembacher! I'm in favor of stabilizing the API before moving forward with the 1.0 release. * Cosign changes: please, file some issues describing the changes to...
> Would https://github.com/theupdateframework/rust-tuf be usable for the TUF integration rather than https://github.com/sigstore/sigstore-rs/tree/main/src/tuf? This crate didn't exist when I added the TUF integration. The code is currently using https://github.com/awslabs/tough - which...
I think it would be nice to have https://github.com/sigstore/sigstore-rs/issues/307 done.
@jleightcap: awesome, who should assign this issue to?
I have doubts about this issue. What is the concrete use case for that, what prevents you from adding the `kuberlr` configuration under your home folder?
This is happening also with version 0.31.0. I've updated the reproduced to reflect that
@aykevl good news, I've checked out the PR you linked above, built tinygo from scratch and then I successfully built and tested the real code (not the small reproducer). The...
Thanks for having reached out. We do not perform a verification after the signature is created. The question is, should this be done inside of the low-level library (like `sigstore-rs`)...