python / python/release-tools

Stop generating Sigstore disjoint verification materials (crt/sig)

Open
#55 0 comments 0 reactions 1 assignee View on GitHub

@sethmlarson is already working on this.

Since Sep 12, 2023.

Dominant language
Python
Stars
61
Forks
48
Avg merge
1h 22m
Merged PRs (30d)
4

Description

sigstore-python v1 currently generates disjoint verification materials (.crt/.sig) and bundles (.sigstore). v2 only generates bundles by default, and bundles are going to be the verification material of choice going forward.

Once https://github.com/python/pythondotorg/issues/2300 has landed and been documented we can remove the generation of disjoint verification materials from release-tools, instead only generating bundles.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.