sigstore-java icon indicating copy to clipboard operation
sigstore-java copied to clipboard
verified publisher icon sigstore

Support uploading signed DSSEs

Open aaronlew02 opened this issue 7 months ago • 3 comments

aaronlew02 avatar Jun 13 '25 18:06 aaronlew02

We have not really found a need for this yet. I've been able to do this programmatically for generating some data for tests cases, I don't see a reason why would we couldn't do this, but it should be considered low priority for now.

loosebazooka avatar Jun 23 '25 17:06 loosebazooka

@haydentherapper

aaronlew02 avatar Jun 23 '25 17:06 aaronlew02

Wouldn’t this be needed for supporting provenance for the Java ecosystem? To clarify, this issue was to track adding support for the DSSE rekor type on signing, as we only saw support for hashedrekord.

Hayden-IO avatar Jun 23 '25 20:06 Hayden-IO