Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1133845

Bug#1029170: ITP: golang-github-sigstore-sigstore -- Common go library shared across sigstore services and clients

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Hi Leo,

Thank you so much for your interest in packaging this! -- I've noticed that
it is a dependency of containers/image for image signing, and have looked
at this package before. Unfortunately, I got intimidated with the sheer
number of unpackaged dependencies that it requires. Maybe this has improved
since the last time I looked at it? In any case, I've decided to patch the
source to disable signing functionality to avoid requiring code from
sigstore, which is of course very unfortunate.

Let me know if you could use another set of eyeballs or help with this
package. It surely seems intimidating (at least to me).

best,
-rt

On Wed, Jan 18, 2023 at 3:21 PM Leo Antunes <costela@debian.org> wrote:

> Package: wnpp
> Severity: wishlist
> Owner: Leo Antunes <costela@debian.org>
>
> * Package name    : golang-github-sigstore-sigstore
>   Version         : 1.5.1-1
>   Upstream Author : The Sigstore Authors <info@sigstore.dev>
> * URL             : https://github.com/sigstore/sigstore
> * License         : Apache-2.0
>   Programming Lang: Go
>   Description     : Common go library shared across sigstore services and
> clients
>
>  sigstore/sigstore contains common Sigstore code: that is, code shared
>  by infrastructure (e.g. Fulcio and Rekor) and Go language clients (e.g.
>  Cosign and Gitsign.
>
>

-- 
regards,
    Reinhard

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#1029170: ITP: golang-github-sigstore-sigstore -- Common go library shared across sigstore services and clients "Leo Antunes" <costela@debian.org> - 2023-01-18 21:30 +0100
  Bug#1029170: ITP: golang-github-sigstore-sigstore -- Common go library shared across sigstore services and clients Reinhard Tartler <siretart@gmail.com> - 2023-01-19 09:40 +0100
    Bug#1029170: ITP: golang-github-sigstore-sigstore -- Common go library shared across sigstore services and clients Leo Antunes <leo@antun.es> - 2023-01-20 13:40 +0100
      Bug#1029170: ITP: golang-github-sigstore-sigstore -- Common go library shared across sigstore services and clients Reinhard Tartler <siretart@gmail.com> - 2023-01-20 16:00 +0100
        Bug#1029170: ITP: golang-github-sigstore-sigstore -- Common go library shared across sigstore services and clients Reinhard Tartler <siretart@gmail.com> - 2023-02-02 12:40 +0100
          Bug#1029170: ITP: golang-github-sigstore-sigstore -- Common go library shared across sigstore services and clients Leo Antunes <leo@antun.es> - 2023-02-05 21:40 +0100

csiph-web