New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Feat/verification attestation #442
Feat/verification attestation #442
Conversation
Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
status) Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
…ess into improve-verify-errors Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
✅ Deploy Preview for witness-project canceled.
|
Signed-off-by: Tom Meadows <tom@tmlabs.co.uk>
Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Signed-off-by: chaosinthecrd <tom@tmlabs.co.uk>
Signed-off-by: John Kjell <john@testifysec.com>
Signed-off-by: John Kjell <john@testifysec.com>
Signed-off-by: John Kjell <john@testifysec.com>
It looks like these changes were merged in from somewhere else... 🤔 |
This is my fault @jkjell. I was working on multiple branches that depended on this functionality to be there. I synced those branches with this one and these changes must have been introduced when we merged one of the other PRs. |
One other thing to add is that I believe we still haven't added any functionality in the CLI to allow the user to handle the attestation (e.g., push to archivista, output to a file etc.). I'll aim to sort this on Monday morning. |
What this PR does / why we need it
Updated functionality for in-toto/go-witness#55, including the changes required for compatibility with in-toto/go-witness#210.
This PR is not yet ready, as in-toto/go-witness#55 introduces a verification attestation which we currently don't expose to the user correctly (in the way of flags and options for signing and saving it).
This PR cannot be merged before #430
Acceptance Criteria Met