Package: wnpp Severity: wishlist * Package name : rekor * URL : https://sigstore.dev/ * License : Apache 2 Programming Lang: Go Description : CLI & Server to use sigstore
Sources: https://github.com/sigstore/rekor sigtore is a project pushed by the linux foundation to "provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain" The CLI doc is pretty good: https://sigstore.dev/get_started/client/ I think we can start with the cli first. As I don't know much about go packaging, I am not going to give it a try but I would appreciate if someone from the go team could give it a try :)
