cnabio/signy

View on GitHub

Go implementation for CNAB content trust verification using TUF, Notary, and in-toto

Stars: 31
Forks: 11
Open beginner issues: 0
Indexed issues: 26

Dominant language: Go
License: MIT
Last GitHub push: Feb 16, 2023
Latest indexed: Sep 15, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: good first issue help wanted
PR merge metrics: No merged PRs in 30d

Open All

26 open issues indexed

Add E2E testing Open

help wanted

cnabio/signy#5 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add unit tests for the list command Open

good first issue help wanted

cnabio/signy#6 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add unit tests for the signing workflow Open

good first issue help wanted

cnabio/signy#7 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Provide options for pushing and pulling from OCI registries Open

cnabio/signy#18 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Ensure existing root keys are passed correctly Open

auth

cnabio/signy#19 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add build matrix and Windows support for builds Open

cnabio/signy#24 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Investigate pushing the thin bundle digest as custom for thick bundles Open

cnabio/signy#33 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Transparent verification of in-toto metadata Open

cnabio/signy#38 · 0 comments · 1 reaction · 1 assignee · Indexed Sep 15, 2026
Update `Makefile` and GitHub action to stop relying on `GOPATH` Open

good first issue

cnabio/signy#52 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Construct a real-world example that contains supply chain metadata Open

help wanted

cnabio/signy#54 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Standardize CI and release process with `cnabio` Open

cnabio/signy#55 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Document usage and login for various trust servers and OCI registries Open

cnabio/signy#61 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Update readme with code of conduct and contributing guidelines Open

cnabio/signy#64 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add build badge for GitHub Actions Open

good first issue

cnabio/signy#65 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Disallow pushing trust collection to a repository without a tag Open

cnabio/signy#70 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Allow users to BYOK Open

enhancement

cnabio/signy#71 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Update readme instructions and documentation Open

cnabio/signy#77 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Use length from Notary to cap bundle download size Open

bug

cnabio/signy#81 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Configurable environment variables for passphrases Open

cnabio/signy#82 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Simplify logic in the top level commands Open

cnabio/signy#83 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Implement support for in-toto sublayouts Open

cnabio/signy#84 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Read flags from environment variables Open

good first issue

cnabio/signy#85 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Verify layout and pubkeys from targets Open

enhancement

cnabio/signy#93 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Verify links from targets/releases Open

enhancement

cnabio/signy#94 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Check for duplicate links? Open

enhancement

cnabio/signy#95 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Pushing/pulling in-toto metadata as OCI artifacts Open

enhancement

cnabio/signy#96 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026

cnabio/signy

Get new issues in your inbox