Issues · Shopify/ruby-sigstore · GitHub

This repository was archived by the owner on Feb 26, 2024. It is now read-only.

Labels Milestones

Considerations for storing gem signatures in rubygems.org

#65

· rochlefebvre opened

on Mar 15, 2022

Considerations for listing signer identities in the gemspec

#64

· rochlefebvre opened

on Mar 14, 2022

Add Shopify entry into https://github.com/sigstore/friends

#60

· rochlefebvre opened

on Jan 25, 2022

Notes on using refresh tokens to decouple browser authentication from requesting a certificate chain

#59

· rochlefebvre opened

on Jan 24, 2022

Only consider signatures from emails listed in the gemspec during signature verification

#58

· rochlefebvre opened

on Jan 18, 2022

Fail gem signing unless the access token's verified email address appears in the gemspec's list of maintainers

#57

· rochlefebvre opened

on Jan 18, 2022

Implement an exception hiererarchy for the plugin

#52

· rochlefebvre opened

on Dec 17, 2021

Implement support for the `--fulcio-host` argument in `gem sign` and `gem build --sign`.

#47

· rochlefebvre opened

on Dec 15, 2021

Implement support for the `--rekor-host` argument in every command

#46

· rochlefebvre opened

on Dec 15, 2021

Enable environment variables to set an id-token

#42

· doodzik opened

on Dec 2, 2021

Support the signing of multiple gems

#32

· rochlefebvre opened

on Nov 23, 2021

Reinstate the license verification workflow

#26

· rochlefebvre opened

on Nov 18, 2021