Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[bug] in-toto-golang is being deprecated, move to in-toto attestations #2036

Open
pxp928 opened this issue Jul 18, 2024 · 0 comments
Open

[bug] in-toto-golang is being deprecated, move to in-toto attestations #2036

pxp928 opened this issue Jul 18, 2024 · 0 comments
Labels
bug Something isn't working good first issue Good for newcomers help wanted Extra attention is needed trust issues describing providing additional information so that consumers can trust GUAC's results

Comments

@pxp928
Copy link
Collaborator

pxp928 commented Jul 18, 2024

Describe the bug
in-toto-golang is being deprecated. We need to move the guesser, processor, certifier and parsers to use the new in-toto attestation statement headers.

Some of that work was done in this PR: #1988, but the guesser and other locations have not been updated.

GUAC version
main
@pxp928 pxp928 added bug Something isn't working trust issues describing providing additional information so that consumers can trust GUAC's results labels Jul 18, 2024
@pxp928 pxp928 mentioned this issue Jul 18, 2024
Merged
9 tasks
@lumjjb lumjjb added good first issue Good for newcomers help wanted Extra attention is needed labels Oct 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working good first issue Good for newcomers help wanted Extra attention is needed trust issues describing providing additional information so that consumers can trust GUAC's results
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@lumjjb @pxp928