laurentsimon
laurentsimon
Let's update https://github.com/slsa-framework/example-package/blob/main/.github/workflows/e2e.generic.slsa2.yml to follow the same structure as https://github.com/slsa-framework/example-package/blob/main/.github/workflows/e2e.go.schedule.main.slsa3.yml Feel free to comment how to improve the current setup. @ianlewis do you want to take a stab at it?
Instead of using curl, we could use the gh CLI `gh api -H "Accept: application/vnd.github.v3+json"...`
There is a lot of redundant code in e2e tests that we may be able to get rid of by creating reusable GitHub actions
APIs design
This issues proposes what the (long-term) APIs will look like. Looking for comments, nothing set in stone. ### 1. Hash engine Tracked in https://github.com/sigstore/model-transparency/issues/140 Why: - for callers to customize...
Provide an API that allows re-computing the hash of a subset of files in a model. This is useful in cases where only a (small) set of files have changed,...
We need a playbook to explain how a hub would integrate our library and what verification needs to be supported. Here is a list of integration paths (not necessarily in...
This is a proposal for v1 release. Scope: support sigstore for path only (no in-memory path support). This requires to implement only a subset of https://github.com/sigstore/model-transparency/issues/172: ```python # model.py def...
E.g. https://www.blake2.net (reduced rounds), https://github.com/BLAKE3-team/BLAKE3
Investigate the speed on OSX. The unit tests seem to be slow. It could be because the runners are not as fast
closes https://github.com/google/model-transparency/issues/111 blocked on https://github.com/sigstore/sigstore-python/issues/628