docs icon indicating copy to clipboard operation
docs copied to clipboard

Move gitsign under tooling section

Open Hayden-IO opened this issue 1 year ago • 4 comments

          gitsign is a unique case, it's more like Cosign in that it's a tool built on top of an SDK to sign a specific format (commits, rather than containers/blobs like Cosign).

What do you think about an additional section for Sigstore tooling that is not Cosign? Something like:

  • Cosign
    • Sign
    • Verify
    • Etc
  • Client libraries
    • sigstore-python
    • sigstore-java
    • etc
  • Sigstore tools
    • gitsign
    • model signing (https://github.com/sigstore/model-transparency)
    • In the future, more tools

If we were to ever refactor Cosign to be smaller in scope to only support container signing, it would then just move under Sigstore tooling, though I don't expect that to happen. But it would give us a category to expand over time as more use cases for Sigstore signing arise.

Originally posted by @haydentherapper in https://github.com/sigstore/docs/pull/323#discussion_r1755126642

Hayden-IO avatar Sep 12 '24 16:09 Hayden-IO

cc @hayleycd

Also cc @mihaimaruseac, who could help with some model signing docs

Hayden-IO avatar Sep 12 '24 16:09 Hayden-IO

We're currently working on documenting the model signing repo and can definitely export these here too once we're done

mihaimaruseac avatar Nov 19 '24 20:11 mihaimaruseac

@mihaimaruseac What we've done with the clients is not to require documentation live in this repo, but to have a brief outline of the purpose of the client, a quickstart guide that shouldn't be hard to keep up to date, and a pointer back to the original repo. See https://docs.sigstore.dev/language_clients/language_client_overview/ for an example.

I think we should do the same with model signing.

Hayden-IO avatar Nov 19 '24 20:11 Hayden-IO

Oh, that's even simpler then. Thanks for the pointer

mihaimaruseac avatar Nov 20 '24 03:11 mihaimaruseac