Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove vendored go-securesystemslib #266

Open
1 task done
adityasaky opened this issue Jan 12, 2024 · 1 comment
Open
1 task done

Remove vendored go-securesystemslib #266

adityasaky opened this issue Jan 12, 2024 · 1 comment
Assignees
Labels
dependencies Pull requests that update a dependency file

Comments

@adityasaky
Copy link
Member

Add a description

go-securesystemslib is vendored in #264. We must remove this copy of the library once our changes are upstreamed or our requirements are met through other APIs. Note that an effort has started in the in-toto community to make go-securesystemslib more robust, which is the reason we haven't already upstreamed our changes.

Relevant log output if the discussion pertains to existing gittuf functionality

No response

Code of Conduct

  • I agree to follow this project's Code of Conduct
@adityasaky adityasaky added the discussion This needs further discussion and feedback label Jan 12, 2024
@adityasaky
Copy link
Member Author

FWIW, I'm a maintainer of go-securesystemslib as well, so I'm going to be involved in the go-securesystemslib improvement effort. I will take this issue on when the library is ready for direct use in gittuf.

@adityasaky adityasaky self-assigned this Jan 12, 2024
@adityasaky adityasaky added dependencies Pull requests that update a dependency file and removed discussion This needs further discussion and feedback labels Jan 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

No branches or pull requests

1 participant