This repository has been archived by the owner on Apr 9, 2024. It is now read-only.

Verify that a provenance is signed by a Trusted Builder #200

Open

mariaschett opened this issue Dec 23, 2022 · 0 comments

Labels

Contributor

mariaschett commented Dec 23, 2022

We can get inspiration from the check in verifySignedAttestation in SLSA.

However, we do want to avoid fetching information from Rekor, if possible.

mariaschett self-assigned this

mariaschett removed their assignment

rbehjati added the endorser label

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.