sigstore/sigstore-rs

Issues

• Refactor: switch to `ring` library

  #307 opened a year ago by flavio
  4

• Allow for Regex in CertSubjectEmailVerifier

  #299 opened a month ago by dave-tucker
  0

• Offline validation of attestations from GitHub's private attestation service

  #393 opened a month ago by grahamc
  5

• RUSTSEC-2023-0055: Multiple soundness issues

  #367 opened 5 months ago by github-actions
  2

• RUSTSEC-2024-0370: proc-macro-error is unmaintained

  #388 opened 2 months ago by github-actions
  2

• RUSTSEC-2023-0086: Multiple soundness issues

  #394 opened a month ago by github-actions
  0

• Provide pure async variants for OIDC flows.

  #129 opened a month ago by bobmcwhirter
  2

• TUF: Target naming for usage

  #134 opened a month ago by asraa
  3

• Update examples to use cosign 2.0 or clarify that it is using 1.x

  #242 opened 2 years ago by lkatalin
  0

• blob verification fails when used with unsanitized base64 signature strings

  #288 opened a year ago by jleightcap
  1

• Add & update targets in TrustedRoot

  #384 opened a month ago by fghanmi
  3

• Minimal dependency versions

  #333 opened a month ago by tannaurus
  2

• Regression: TUF contents are not saved to disk anymore

  #345 opened a month ago by flavio
  3

• Do not expose the `rustls_pki_types::CertificateDer` object inside of public API

  #347 opened 7 months ago by flavio
  3

• JSON canonicalization uses multiple libraries.

  #339 opened 7 months ago by vembacher
  2

• Remove `async` from `sigstore::trust::TrustRoot` trait

  #346 opened a month ago by flavio
  1

• compatibility issue with root-signing TUF metadata

  #369 opened a month ago by jku
  6

• Cannot load cosign generated key pairs with empty password

  #380 opened 2 months ago by gmpinder
  2

• Route away from experimental to 1.0

  #274 opened a year ago by lukehinds
  20

• Support more key types for CT `Keyring`

  #373 opened 4 months ago by tnytown
  0

• BUG: Failed to parse root metadata: unknown variant `ecdsa`, expected one of `rsa`, `ed25519`, `ecdsa-sha2-nistp256`

  #338 opened 7 months ago by astoycos
  8

• Support staging tests in conformance tests

  #335 opened 7 months ago by jku
  0

• cosign client builder cannot build without tuf feature

  #318 opened 8 months ago by mythi
  0

• Support for inclusion/consistency proofs and checkpoint/STH verification.

  #283 opened a year ago by vembacher
  6

• Link this repo to the crates.io entry

  #295 opened 10 months ago by vbatts
  2

• support `mmap`, `munmap`

  #314 opened a year ago by jleightcap
  2

• Refactor: investigate removal of `pikcy-rs`

  #308 opened a year ago by flavio
  0

• Sigstore bundle support

  #280 opened a year ago by woodruffw
  7

• Add conformance testing

  #178 opened 2 years ago by woodruffw
  4

• Client libraries should verify after signing

  #296 opened a year ago by znewman01
  1

• Improve API of cosign module.

  #284 opened a year ago by vembacher
  0

• update crate dependencies - ed25519-dalek and ed25519

  #262 opened a year ago by dmitris
  0

• Add support for KMS plugins to sign/verify signatures

  #253 opened 2 years ago by Xynnn007
  0

• Rekor LogEntry deserialization error

  #243 opened 2 years ago by danbev
  0

• Define fine-grained feature to decrease the compiled size

  #187 opened 2 years ago by Xynnn007
  5

• Dead contributor docs link in readme

  #224 opened 2 years ago by oliviacrain
  0

• Support compiling on wasm32 architectures

  #220 opened 2 years ago by lulf
  0

• Using ed25519 version = "2" leads build errror due to version conflict with d25519-dalek

  #222 opened 2 years ago by vembacher
  0

• Wrong parameter order inside documentation example

  #214 opened 2 years ago by vembacher
  1

• Add ability to parse Rekor LogEntry

  #150 opened 2 years ago by lkatalin
  1

• Switch to Fulcio V2 API

  #139 opened 2 years ago by haydentherapper
  1

• Making fulcio and rekor clients independent of reqwest

  #176 opened 2 years ago by lulf
  5

• Add OCI container image signing

  #125 opened 2 years ago by Xynnn007
  6

• Are we using OpenAPI?

  #166 opened 2 years ago by lkatalin
  7

• Update generation of models from OpenAPI to protobuf

  #167 opened 2 years ago by lkatalin
  0

• Add ability to verify signatures with a user provided certificate

  #157 opened 2 years ago by flavio
  1

• Move Rekor module's lib.rs to mod.rs

  #144 opened 2 years ago by lkatalin
  0

• Verify not working if the certificate annotation is present and there is no bundle annotation

  #135 opened 2 years ago by raulcabello
  2

• Fulcio client support

  #131 opened 2 years ago by bobmcwhirter
  0

• Propose Xynnn007 as maintainer

  #126 opened 2 years ago by lukehinds
  2