Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

RFC: Proposal for new signing mechanism #37

Open
wants to merge 7 commits into
base: master
Choose a base branch
from
Open

RFC: Proposal for new signing mechanism #37

wants to merge 7 commits into from

Commits on Jan 27, 2022

  1. Add RFC for new gem signing mechanism 

    Co-authored-by: Roch Lefebvre <[email protected]>
    @jchestershopify @rochlefebvre
    jchestershopify and rochlefebvre committed Jan 27, 2022
    Configuration menu
    Copy the full SHA
    73287a6 View commit details
    Browse the repository at this point in the history

  2. Update frontmatter 

    Co-authored-by: Roch Lefebvre <[email protected]>
    @jchestershopify @rochlefebvre
    jchestershopify and rochlefebvre committed Jan 27, 2022
    Configuration menu
    Copy the full SHA
    2abafa1 View commit details
    Browse the repository at this point in the history

Commits on Jan 28, 2022

  1. Expand on authenticity and integrity 

    Co-authored-by: Roch Lefebvre <[email protected]>
    @jchestershopify @rochlefebvre
    jchestershopify and rochlefebvre committed Jan 28, 2022
    Configuration menu
    Copy the full SHA
    54c3e3b View commit details
    Browse the repository at this point in the history

  2. Add questions for email links and key trust

    @jchestershopify
    jchestershopify committed Jan 28, 2022
    Configuration menu
    Copy the full SHA
    7a67f89 View commit details
    Browse the repository at this point in the history

Commits on Jan 31, 2022

  1. Change 'dual-key' to 'public-key' crypto

    @jchestershopify
    jchestershopify committed Jan 31, 2022
    Configuration menu
    Copy the full SHA
    c5598c0 View commit details
    Browse the repository at this point in the history

Commits on Feb 15, 2022

  1. Store the signature in a hashed rekord

    @rochlefebvre
    rochlefebvre committed Feb 15, 2022
    Configuration menu
    Copy the full SHA
    cb6854b View commit details
    Browse the repository at this point in the history

Commits on Mar 8, 2022

  1. Link to SupplyChainSecurityCon presentation on in-toto/TUF/sigstore 

    Co-authored-by: Trishank Karthik Kuppusamy <[email protected]>
    @jchestershopify @trishankatdatadog
    jchestershopify and trishankatdatadog authored Mar 8, 2022
    Configuration menu
    Copy the full SHA
    773702a View commit details
    Browse the repository at this point in the history