in-toto / in-toto-golang

A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

https://in-toto.io/

in-toto/in-toto-golang Issues

Oversight in the SLAS v1 field `invocationID`?
Closed a month ago7
Source code missing for test/data/helloworld binary
Updated 5 months ago4
CII OpenSSF best-practice badge
Updated 7 months ago1
Improve Scorecard score for in-toto-golang
Updated 7 months ago1
Add OpenSSF Scorecards
Updated 7 months ago3
Define intoto v1.0 statement type
Updated 8 months ago6
ALLOW pattern doesn't work as expected on windows
Closed 10 months ago1
Use in-toto/attestation Go bindings for Statement and SLSA provenance predicate layers
Updated a year ago
in-toto-golang record stop doesn't removes unfinished link.
Closed a year ago2
in-toto-golang does not provide defaults for excluding artifacts
Updated a year ago7
Abstract PKI with SPIRE
Closed a year ago3
Allow generating in-toto links using DSSE
Closed a year ago9
Revisit type assertions
Updated a year ago
Typo in provenance structure
Closed a year ago1
Verification using ED25519 keys for functionaries returns error
Closed a year ago9
Inconsistent path match behaviour compared to python implementation
Updated a year ago4
Support v1.0 SLSA provenance format
Closed a year ago
Test interoperability with the python implementation via subprocess calls
Updated a year ago4
Option to substitute signing algorithm to a custom version
Updated a year ago3
Potential bug in InTotoRun
Closed a year ago1
Add version/SHA to provevanceBuilder
Closed a year ago3
non unique dictionary key error
Closed a year ago9
CycloneDX predicate is wrong
Closed 2 years ago1
Support older SLSA version and v1.0
Closed 2 years ago8
Consider splitting signing-spec/ITE-5 code (`package ssl`) into a standalone repository
Closed 3 years ago8
go test ./... fails to run
Closed 3 years ago6
RecordArtifact needs a flag for line normalization
Closed 3 years ago5
Provide examples to each major in-toto cli subcommand
Updated 3 years ago3
in-toto attestation JSON schema verify via CLI
Updated 3 years ago15
Add Documentation for Auto-Completion
Closed 3 years ago
TPM 2.0 Support
Updated 3 years ago2
Left stripping should check if resulting paths are not unique
Closed 3 years ago
Use Go Linter for CI
Closed 3 years ago5
File integrity checks.
Updated 3 years ago1
in_toto.Signature struct definition does not match specification
Closed 3 years ago4
CLI tool
Closed 3 years ago3
InTotoRun inconsistency: handling symlink cycles
Updated 3 years ago
In-toto record functionality
Closed 3 years ago2
Do not share state in test functions
Updated 3 years ago
Run unit tests against the last two stable Go releases
Closed 3 years ago
Export function to validate a metablock
Closed 3 years ago1
validate functions, specifically key validations
Updated 3 years ago1
Go 1.15 Support
Closed 3 years ago
`go.mod` still not set up correctly
Closed 3 years ago4
ecdsa curve sanity checks
Closed 4 years ago1
ecdsa-sha2-nistp384 support
Closed 4 years ago2
Lack of version tagging causing issues with `go get`
Closed 4 years ago1
Windows Compatibility
Closed 4 years ago10
Moving to Github Actions for CI
Closed 4 years ago1
subsetCheck function as part of our Set implementation
Closed 4 years ago2