Christian Rebischke
Christian Rebischke
Hello everybody, I have updated my PR for in-toto-golang releases. https://github.com/in-toto/in-toto-golang/pull/128 Instead of using static keys in the Github secret store we are now directly using the Github Actions OIDC...
@developer-guy I have force-pushed to this branch. Have a look.
I have added SBOM generation and updated the goreleaser version
@SantiagoTorres Yes, I just pushed 3 new error types in my latest in-toto-run commit. The error handling gets so much better with this. We get basically from something like this:...
Aren't we supporting PKCS8 keys already? Doesn't this mean that we support loading GPG keys from disk, too? Or do you mean docking to the gpg-agent for all operations? I...
@colek42 sorry for the long time delay. Do you have anything to 'show' already? I see that you guys open PRs sometimes. It gives a good hint and as far...
This is a good point @colek42!
Are Cue and JSON schemas canonical? If they are, I don't think this is a problem, right?
@developer-guy Sorry, my bad. Let me rephrase it: are CUE and JSON Schema compatible with Canonical JSON? If I get this right: Cue and JSON Schema provide a schema for...