Nathan Smith
Nathan Smith
Not really an issue just thanks for the talk and this reference implementation. I've been applying this approach to ETL pipelines and it works beautifully.
**Description** The #alerts channel in sigstore frequently alerts on Rekor latency in excess of 750ms: https://sigstore.slack.com/archives/C01P48SV8NQ We should investigate the paths that lead to this latency and check if we...
**Description** To build efficient monitoring tooling it would be very nice to support an eventing / streaming API. Cloud events was mentioned as a potential avenue for this functionality @bobcallaway
Hi, I've got some strange display regressions problems in [Maxima.jl](https://github.com/nsmith5/Maxima.jl). The main data structure `MExpr` crashes the kernel when being displayed. The data structure supports "text/latex" and "text/plain" output. The...
Would be nice to be able to verify that releases of `sbom-tool` are build by CI by using e.g sigstore to sign binaries
On Linux I get the following error message. OS: Fedora 36 ARch: x86_64 ``` winsbom generate -b . No usable version of libssl was found Aborted (core dumped) ```
**Description** The cosign CLI allows setting `--signature-digest-algorithm` to one of `sha224|sha256|sha384|sha512` to accommodate [the many hash algorithms that might have been used with elliptical KMS keys](https://github.com/sigstore/sigstore/blob/eaea65e41486b908672b6b48eea37cf99ec7ca14/pkg/signature/kms/aws/client.go#L152-L163). The [current `ClusterImagePolicy`](https://github.com/sigstore/cosign/blob/623d50f9b77ee85886a166daac648455e65003ec/pkg/apis/cosigned/v1alpha1/clusterimagepolicy_types.go) API...
**Description** It takes a really long time to get started with Fulcio development because of the lack of architecture docs. The reader needs to spin everything up and look the...
**Issue** Fulcio configuration is a bit of an inconsistent experience right now for the end user and as a developer. From an operator perspective: - The OIDC provider details live...
Currently Julia does not support question marks inside of variable names. This was discussed a while ago , with support, but never pursued (#1539). The major implication of allowing this...