Nick Miyake

Opened https://github.com/natefinch/lumberjack/pull/80 as a PR that implements the requested changes to this PR and also adds a test.

Hi @adityasaky, I was wondering if you could comment on the overall state of ITE-10 and ITE-11 and their relations to the in-toto spec. It looks like ITE-10 merged about...

@adityasaky @trishankatdatadog thanks! I've joined the CNCF Slack and pinged there for further information. For context, our organization has been using in-toto to perform verification of deployment artifacts since around...

Reverted feature because it was causing performance issues. Should be possible to do in a better manner, but re-opening until that can be done.

Thanks for filing this! The configuration looks reasonable to me. I think it would be most natural for the os-arch build to use any globally specified `environment` values first, and...

Thanks. So for point (2), that means that the Linux container image contains the `osxcross-gcc` binary and uses that for the darwin builds?

Got it, that makes sense. Given all of this, I'm in sync with moving forward with the original proposal (as long as the environment information for `os-arch` is added in...

Agree that more documentation would be better here. Will get to it when I can, but also happy to accept a PR :)

Thanks for documenting this -- definitely understand the issue, and I'm actually encountering something similar with the GitHub publisher. I think there are basically 2 high-level approaches: 1. Add flags/modes...

Thanks for the feedback. I think this is probably reasonable -- I took a quick look, and it looks like this does end up getting overridden in many of our...