sigstore/sigstore-python issues and pull requests

#59 - internal/oidc, test: ambient credentials, refactoring

Pull Request - State: closed - Opened by woodruffw about 2 years ago - 2 comments
Labels: enhancement, component:signing

#58 - Keep a CHANGELOG

Issue - State: closed - Opened by woodruffw about 2 years ago - 5 comments
Labels: enhancement

#57 - Security Policy violation Outside Collaborators

Issue - State: closed - Opened by allstar-app[bot] about 2 years ago - 7 comments
Labels: allstar

#56 - Support OAuth flow for signing

Pull Request - State: closed - Opened by tetsuo-cpp about 2 years ago - 1 comment
Labels: enhancement, component:signing

#55 - version: 0.0.1-pre.2

Pull Request - State: closed - Opened by woodruffw about 2 years ago - 1 comment

#54 - sigstore: prevent unintended I/O side effects

Pull Request - State: closed - Opened by woodruffw about 2 years ago
Labels: bug, component:cli

#53 - Implement Bandit CI Tests

Pull Request - State: closed - Opened by lukehinds about 2 years ago - 3 comments
Labels: qa, component:cicd

#52 - Support verifying offline Rekor bundles

Issue - State: closed - Opened by haydentherapper about 2 years ago - 6 comments
Labels: enhancement

#51 - Bandit scanning

Issue - State: closed - Opened by lukehinds about 2 years ago - 2 comments
Labels: enhancement, qa, component:cicd

#50 - Release: sign via ambient credentials

Issue - State: closed - Opened by di about 2 years ago - 3 comments
Labels: enhancement, component:signing

#49 - cli, sign, verify: sign and verify multiple files at once

Pull Request - State: closed - Opened by woodruffw about 2 years ago

#48 - Support globs for filenames

Issue - State: closed - Opened by di about 2 years ago - 3 comments
Labels: enhancement

#47 - github/workflows: add release workflow

Pull Request - State: closed - Opened by woodruffw about 2 years ago - 2 comments
Labels: component:cicd

#46 - CI: Check for license headers

Issue - State: closed - Opened by di about 2 years ago - 1 comment
Labels: enhancement, qa, component:cicd

#45 - Migrate repo fields / governance to sigstore

Pull Request - State: closed - Opened by lukehinds about 2 years ago - 2 comments

#44 - CI: Use a discrete deployment environment for releases

Issue - State: open - Opened by woodruffw about 2 years ago - 7 comments
Labels: component:cicd

#43 - README: fill in details

Pull Request - State: closed - Opened by woodruffw about 2 years ago
Labels: documentation

#42 - Verify that timestamp is before the signing certificate expiry

Pull Request - State: closed - Opened by tetsuo-cpp about 2 years ago - 1 comment

#41 - Support OAuth flow for signing

Issue - State: closed - Opened by tetsuo-cpp about 2 years ago - 1 comment
Labels: enhancement, component:signing

#40 - Create initial release on PyPI

Issue - State: closed - Opened by tetsuo-cpp about 2 years ago - 2 comments

#39 - Populate README

Issue - State: closed - Opened by tetsuo-cpp about 2 years ago
Labels: documentation

#38 - Implement verification of Merkle inclusion proof

Pull Request - State: closed - Opened by tetsuo-cpp about 2 years ago - 1 comment
Labels: component:verification

#37 - Testing: Unit tests for verification components

Issue - State: closed - Opened by woodruffw about 2 years ago - 3 comments
Labels: component:tests

#36 - Implement Signed Entry Timestamp (SET) verification

Pull Request - State: closed - Opened by tetsuo-cpp about 2 years ago - 1 comment
Labels: component:verification

#35 - Verify that timestamp is before the signing certificate expiry

Issue - State: closed - Opened by tetsuo-cpp about 2 years ago
Labels: enhancement, component:verification

#34 - Implement verification of Merkle inclusion proof

Issue - State: closed - Opened by tetsuo-cpp about 2 years ago
Labels: enhancement, component:verification

#33 - Implement Signed Entry Timestamp (SET) verification

Issue - State: closed - Opened by tetsuo-cpp about 2 years ago
Labels: enhancement, component:verification

#32 - Transfer to `sigstore` org

Issue - State: closed - Opened by di about 2 years ago - 3 comments

#31 - Support ambient credential detection

Issue - State: closed - Opened by di about 2 years ago - 18 comments
Labels: enhancement, component:signing, blocked

#30 - Switch to verifying embedded SCTs

Issue - State: closed - Opened by tetsuo-cpp about 2 years ago - 17 comments
Labels: enhancement, component:verification, upstream

#29 - Request certificates via CSR

Issue - State: closed - Opened by di about 2 years ago
Labels: enhancement, component:signing, upstream

#28 - Bring up our coverage and reenable coverage testing

Issue - State: closed - Opened by tetsuo-cpp about 2 years ago - 9 comments
Labels: qa, component:tests

#27 - Add CLI options compatible with `cosign` where applicable

Issue - State: closed - Opened by tetsuo-cpp about 2 years ago - 1 comment
Labels: enhancement, component:cli

#26 - Implement `verify` command

Pull Request - State: closed - Opened by tetsuo-cpp about 2 years ago - 6 comments
Labels: component:cli

#25 - Retrieve CTFE signing key via TUF

Issue - State: closed - Opened by tetsuo-cpp about 2 years ago - 41 comments
Labels: enhancement, component:verification