in-toto/attestation

Issues

• Guidance on `subject[*].name` uniqueness with Image Indexes

  #348 opened 2 months ago by lcarva
  0

• `subject` part of spec not precise enough for validation

  #349 opened 2 months ago by fmoessbauer
  0

• Update `https://in-toto.io/Statement/v1` to point to latest version

  #346 opened 2 months ago by darkfeline
  0

• Media Type directions in envelope.md aren't clear

  #343 opened 2 months ago by TomHennen
  3

• Attestation for policy verification

  #277 opened 9 months ago by kpk47
  21

• Conflict in Vulnerabilities predicate definition

  #342 opened 2 months ago by sherzberg-1
  0

• digest in digest_set and ResourceDescriptor is not valid JSON

  #269 opened 2 months ago by gerardborst
  13

• Generate TypeScript protobuf bindings

  #339 opened 3 months ago by bdehamer
  0

• Incorporate ITE-9 predicate formatting into main spec

  #326 opened 3 months ago by marcelamelara
  0

• Add attestation-verifier to docs

  #290 opened 8 months ago by marcelamelara
  0

• Define a field for attestor identification

  #329 opened 3 months ago by AdamZWu
  1

• Add a ResourceDescriptor predicate

  #179 opened a year ago by marcelamelara
  9

• Should in-toto managed vetted predicates type URIs point to GitHub repo?

  #313 opened 4 months ago by marcelamelara
  6

• Add missing predicate specs to in-toto.io namespace

  #321 opened 5 months ago by marcelamelara
  0

• Inefficient payload encoding

  #289 opened 8 months ago by AdamZWu
  8

• Add proto spec for a bundle

  #280 opened 9 months ago by cflewis
  10

• Add more examples for the `ResourceDescriptor` field type

  #256 opened a year ago by joshuagl
  6

• Workaround: Go get pulls old version

  #307 opened 6 months ago by Forrin
  2

• Python: Unable to construct `Statement` objects

  #299 opened 6 months ago by woodruffw
  6

• Python: Consider using betterproto for models?

  #291 opened 8 months ago by woodruffw
  5

• Drop Python 3.7

  #311 opened 6 months ago by woodruffw
  0

• Protoc-generated Python code should pass pylint/black checks

  #247 opened 6 months ago by marcelamelara
  0

• Python: New release + publish from CI with a Trusted Publisher?

  #305 opened 6 months ago by woodruffw
  7

• VSA is at v0.2 instead of v1

  #298 opened 6 months ago by trishankatdatadog
  1

• Add Predicate for Open Source Program Office (OSPO) Governance

  #297 opened 7 months ago by geekythoughts
  0

• `in_toto_attestation` broken on Python < 3.9

  #300 opened 6 months ago by woodruffw
  2

• Are subjects conjunctive or disjunctive?

  #292 opened 8 months ago by woodruffw
  14

• Add guidance on how & how not to verify attestations

  #270 opened 10 months ago by TomHennen
  2

• Create contributor documentation explaining terminology/naming conventions

  #284 opened 9 months ago by marcelamelara
  1

• Clearly document the mediaType of in-toto attestation layers

  #271 opened 8 months ago by marcelamelara
  24

• Are the `subject` entries of special ResourceDescriptor type?

  #279 opened 9 months ago by AdamZWu
  3

• Create test suite for Python bindings

  #176 opened 10 months ago by marcelamelara
  0

• Use `errors.Is()` in Golang tests

  #231 opened a year ago by marcelamelara
  0

• Attestation for AI-assisted code

  #244 opened a year ago by trishankatdatadog
  1

• The protobuf field type for `annotations` in the ResourceDescriptor should be `Struct`

  #262 opened a year ago by marcelamelara
  0

• Update run-go-tests.yml workflow to be triggered through other workflows

  #265 opened a year ago by marcelamelara
  2

• CamelCased protos

  #250 opened a year ago by sherzberg-1
  1

• Expand ResourceDescriptor `annotations` to allow any type?

  #242 opened a year ago by MarkLodato
  11

• `spec/v1` vs `spec/v1.0`?

  #248 opened a year ago by AdamZWu
  1

• Include SLSA provenance v1 predicate language bindings with pre-generated code?

  #200 opened a year ago by marcelamelara
  1

• Replace per-language proto validators with custom validators

  #232 opened a year ago by marcelamelara
  0

• Create test suite for Go bindings

  #175 opened a year ago by marcelamelara
  0

• Publish attestation maintainers meeting notes

  #216 opened a year ago by marcelamelara
  0

• Add pre-generated Rust bindings for protobufs

  #174 opened a year ago by marcelamelara
  0

• Drop base64 encoding requirement from ResourceDescriptor.contents?

  #188 opened a year ago by wlynch
  3

• Add openSSF best practices badge

  #186 opened a year ago by marcelamelara
  0

• How to handle gitCommit with sha256 commits

  #184 opened a year ago by TomHennen
  6

• V1 Statement url 404's

  #183 opened a year ago by feelepxyz
  0

• Create test suite for Rust bindings

  #178 opened a year ago by marcelamelara
  0

• Create test suite for Java bindings

  #177 opened a year ago by marcelamelara
  0