Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tracking Issue: implement embedding mode for manifest creation #199

Open
4 tasks
alilleybrinker opened this issue Aug 23, 2024 · 0 comments
Open
4 tasks
Labels
crate: omnibor Relating to the omnibor crate type: feature New feature or request

Comments

@alilleybrinker
Copy link
Member

alilleybrinker commented Aug 23, 2024

Right now the omnibor crate only allows manifests to be created in "non-embedding" mode, which means that when the manifest is created, the artifact itself is not updated with a reference to the manifest. This is fine and compliant with the OmniBOR spec, but we also want to support "embedding mode" where the target artifact is updated. Embedding establishes a cryptographic relationship between the manifest and the Artifact Identifier of the target, ensuring that changes in the dependencies used to build the artifact will result in a change of the identifier for the artifact itself. It's in embedding mode that OmniBOR's Artifact IDs established the Merkle-tree like quality that was part of the original value proposition for it.


There are multiple parts to implementing this, which already have a skeleton in the existing code populated with todo!() macro calls:

While support for a broader range of embedding contexts may be added in the future, this is at least the minimal set of embedding contexts we'd like to support at the beginning.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
crate: omnibor Relating to the omnibor crate type: feature New feature or request
Projects
Status: N/A
Development

No branches or pull requests

1 participant