pulp / pulp/pulp_container

Test a container plugin signing service with PQC

Open
#2,280 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Task
Dominant language
Python
Stars
31
Forks
56
Avg merge
2d 22h
Merged PRs (30d)
22

Description

The tooling at the moment is still a bit raw and experimental, but eventually we should have a test that uses a PQC key to sign manifests

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The issue names a container plugin signing service, PQC keys, and manifest signing, but no files or tests. Start by locating the signing service and existing manifest-signing tests, then determine how a PQC key can be used in that path. Done means a test exercises signing a manifest with a PQC key.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.