Marco Franssen

This is how I temporarily work around this issue until this action gets a permanent fix. The problem only seems to occur on small new repos, where not all the...

@csongpaxos haven't tried it yet. Regarding your k8s question. Within k8s you have services, those will have according dns records. So e.g.: http://cosign-service.your-namespace/verify should be possible if you have a...

@csongpaxos nope sorry didn't went into opa and those topics yet to figure out how to configure it.

In general I have one question. Do we need to document some steps in the scenarios regarding the following? - If I used my compromised key to sign any releases...

I fixed 5.5.5 release in #384. Already tested on my personal blog. Basically 1 line of code was missing and one had to be adjusted. All the rest in this...

> having the same issue after upgrading to 5.5.5. Correct, my fix has to be released as a `5.5.6`.

> excellent! when would that be? I hope as soon as possible. Depends on the maintainer of this repo.

Is there more required to get this PR merged?

I'm also willing to contribute this feature. I also have experience in generating signatures, provenance and sboms for Go and Docker projects. This is just an example, I build for...

It would be awesome if you could send me an example... Currently we have an issue with sockets getting disconnected after a while. I managed to send the message, just...