in-toto / in-toto/github-action
Add support for signing w/ keys provided by Fulcio
Open
- Dominant language
- JavaScript
- Stars
- 8
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
We need to use ITE-7 to implement this.
- https://github.com/in-toto/ITE/blob/master/ITE/7/README.adoc
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reading ITE-7 in the linked README.adoc to understand the required Fulcio key-signing behavior, then locate the action's signing entry point. Done means the GitHub Action can sign provenance using keys provided by Fulcio, with behavior verified against the requirements in ITE-7.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- devops, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100