Neil Naveen

Also, the use cases of verify commit are minor, and after #337 is merged, parsing invalid states will be much easier. Currently, the only use case of verify-commit(that I can...

I just checked remove rule with the regular list-rules building of main. Everything is working, I think it is just a problem with my current implmentation

Don't we already have somthing like this in the gittuf demo repo? Would we be able to update that demo repo with something like this, since currently, the demo repo...

Also we will have to continuously support go-git if we want to expose gittuf as an API, if people want to work on git repo's that are not local, and...

Currently, when we traverse the RSL, we do so linearly, even though what we actually want is an RSL entry for a certain ref. When verifying a ref, if we...

@adityasaky @patzielinski Thoughts?

Somthing like this, with the pointers being the extra data stored in each entry 

I will work on this

It makes sense; any of these pointers could be spoofed by a malicious actor. Verifying the linearity of the RSL would not be possible, but having pointers like these would...