-
Notifications
You must be signed in to change notification settings - Fork 59
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Feat/verification attestation #442
Feat/verification attestation #442
Conversation
Signed-off-by: chaosinthecrd <[email protected]>
status) Signed-off-by: chaosinthecrd <[email protected]>
Signed-off-by: chaosinthecrd <[email protected]>
Signed-off-by: chaosinthecrd <[email protected]>
…ess into improve-verify-errors Signed-off-by: chaosinthecrd <[email protected]>
Signed-off-by: chaosinthecrd <[email protected]>
Signed-off-by: chaosinthecrd <[email protected]>
✅ Deploy Preview for witness-project canceled.
|
Signed-off-by: Tom Meadows <[email protected]>
Signed-off-by: chaosinthecrd <[email protected]>
Signed-off-by: chaosinthecrd <[email protected]>
Signed-off-by: chaosinthecrd <[email protected]>
Signed-off-by: John Kjell <[email protected]>
Signed-off-by: John Kjell <[email protected]>
Signed-off-by: John Kjell <[email protected]>
It looks like these changes were merged in from somewhere else... 🤔 |
This is my fault @jkjell. I was working on multiple branches that depended on this functionality to be there. I synced those branches with this one and these changes must have been introduced when we merged one of the other PRs. |
One other thing to add is that I believe we still haven't added any functionality in the CLI to allow the user to handle the attestation (e.g., push to archivista, output to a file etc.). I'll aim to sort this on Monday morning. |
What this PR does / why we need it
Updated functionality for in-toto/go-witness#55, including the changes required for compatibility with in-toto/go-witness#210.
This PR is not yet ready, as in-toto/go-witness#55 introduces a verification attestation which we currently don't expose to the user correctly (in the way of flags and options for signing and saving it).
This PR cannot be merged before #430
Acceptance Criteria Met