Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update in-toto library #273

Closed
bdehamer opened this issue Aug 15, 2024 · 0 comments · Fixed by #274
Closed

Update in-toto library #273

bdehamer opened this issue Aug 15, 2024 · 0 comments · Fixed by #274
Assignees
@codysoyland
Labels
enhancement New feature or request v1.0 items we want to consider for a v1.0 release

Comments

@bdehamer
Copy link
Collaborator

Description

The in-toto library used for the Statement type does not account for all of the available fields in a valid in-toto statement has been deprecated.

The new, recommended type comes from the github.com/in-toto/attestation library.

Note that this will be a breaking API change.
@bdehamer bdehamer added enhancement New feature or request v1.0 items we want to consider for a v1.0 release labels Aug 15, 2024
@codysoyland codysoyland self-assigned this Aug 15, 2024
codysoyland added a commit that referenced this issue Aug 15, 2024
@codysoyland
Switch in-toto library to github.com/in-toto/attestation
0b63c83 
Fixes #273

Signed-off-by: Cody Soyland <[email protected]>
@codysoyland codysoyland mentioned this issue Aug 15, 2024
Merged
codysoyland added a commit that referenced this issue Aug 15, 2024
@codysoyland
Switch in-toto library to github.com/in-toto/attestation (#274)
060b639 
* Switch in-toto library to github.com/in-toto/attestation

Fixes #273

Signed-off-by: Cody Soyland <[email protected]>

* go mod tidy in oci-image-verification

Signed-off-by: Cody Soyland <[email protected]>

---------

Signed-off-by: Cody Soyland <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@codysoyland codysoyland

Labels
enhancement New feature or request v1.0 items we want to consider for a v1.0 release
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Switch in-toto library to github.com/in-toto/attestation sigstore/sigstore-go
2 participants
@codysoyland @bdehamer