Wolf Vollprecht
Wolf Vollprecht
Yeah after diving deeper into the whole sigstore / in-toto validation topic I understand that you would want to validate the in-toto statement subject.name against the file name of the...
@beckermr I get that. The main difference between rattler-biuld and conda-build is that in conda-build `set foobar = 123` is in the "Jinja" realm. In rattler-build context part it's a...
Hey @jku I have been working on this and I am sending a series of PRs. You can check out my branch over at https://github.com/wolfv/sigstore-rs/tree/cms which implements v0.3 bundle support...
There are now two alternative implementations that support v0.3 in Rust: - https://github.com/jdx/sigstore-verification - https://github.com/wolfv/sigstore-rust
@jaimergp do you know if our content checks catch symlinks in packages on Windows? I think that should be disallowed for maximum compatibility.
Thanks, excellent bug report. No idea what's going on though! Is it possible for you to check the value of %error_level% or what that special variable is? And can you...
Did we now decide that this is a user error and one should use `CALL`? :)
Hi @JerryMaoQC thanks for tackling this! Looks like excellent work :) I am on vacation for 2 weeks, but will be happy to have a look upon return.
Hi Jerry, I will have a look at this PR today and give some feedback. Sorry for the long delay!
Hmm, I am currently wondering if we can find a way to achieve this by leveraging libsolv. Instead of manipulating the transaction, we could also first solve, then create a...