sigstore-java

sigstore-java copied to clipboard

we have a few scripts in here that could probably benefit from some linting

loosebazooka

https://github.com/sigstore/sigstore-java/pull/369/files/f0fd2d979f2341f767017448ee8cc6708c561ff6#r1136968518

loosebazooka

Update jsonscheme2dataclass plugin to 6.0.0

6

Signed-off-by: Appu Goundan

loosebazooka

Split sigstore-java into several modules

2

**Description** Currently, sigstore-java is all-in-one, so users can't select the bits they need, and the dependency surface might become an issue. For instance, generating Sigstore Bundle requires `protobuf-java` which is...

vlsi

keep http params sigstore java user-agent up to date.

4

**Description** It would be good for clients to be able to specify a `User-Agent` header on HTTP requests to sigstore services. @loosebazooka

bobcallaway

Prefer OffsetDateTime instead of ZonedDateTime in TUF

2

**Description** `ZonedDateTime` allows dates with named timezones (e.g. `Europe/Berlin`) that depend on the local timezone database. I wonder if we really need to support named time zones. It might be...

vlsi

We should take a look at more modern testing approaches that could improve the readability and maintenance of our test cases. fo reference #200

patflynn

**Description** `KeylessSigner.sign` is stuck for significant amount of time. It might be that I skipped OIDC flow in the web-browser, however, I believe there should be some kind of timeout....

vlsi

**Description** Is `KeylessSigningResult` to be `sha256` always? E.g. https://docs.google.com/document/d/1gucjOA_bGyRjK6TeaOI-X5GIUv8WsPzeMDMkq25Kv4Y/edit# consider having "algorithm" as an explicit field.

vlsi

**Description** `KeylessSigner.builder().sigstorePublicDefaults().build()` is nice, however, it makes it hard to peek into the results, as the client have no guarantees on which "defaults" are selected, and the defaults might even...

vlsi