Awesome, thanks for the update! Skimming over the sources of sigstore, it seems to me that the awk-sdk might be easy to disable with minor surgery. Would you be open to uploading a sigstore package to NEW with the aws functionality disabled and re-enable it as soon as the awk package becomes available in Debian?
-rt On Fri, Jan 20, 2023 at 7:30 AM Leo Antunes <l...@antun.es> wrote: > Hi Reinhard! > > I think this changed a bit in the meantime: now the sigstore project has > mostly shared lib code, while the individual commands (rekor, fulcio, > gitsign, etc) are all in separate repos. So I expect this library to not be > THAT difficult to package (the next one on my list is rekor - see #990249 > - which will probably require more work). > As soon as #1022937 is done (waiting in NEW since 2 months), I expect > sigstore to be a quick follow-up. > However, I'd gladly take an extra pair of eyes on the package, so I can > ping you as soon as I have something that builds. > > > Thanks, > Leo Antunes > ------- Original Message ------- > On Thursday, January 19th, 2023 at 09:37, Reinhard Tartler < > siret...@gmail.com> wrote: > > Hi Leo, > > Thank you so much for your interest in packaging this! -- I've noticed > that it is a dependency of containers/image for image signing, and have > looked at this package before. Unfortunately, I got intimidated with the > sheer number of unpackaged dependencies that it requires. Maybe this has > improved since the last time I looked at it? In any case, I've decided to > patch the source to disable signing functionality to avoid requiring code > from sigstore, which is of course very unfortunate. > > Let me know if you could use another set of eyeballs or help with this > package. It surely seems intimidating (at least to me). > > best, > -rt > > On Wed, Jan 18, 2023 at 3:21 PM Leo Antunes <cost...@debian.org> wrote: > >> Package: wnpp >> Severity: wishlist >> Owner: Leo Antunes <cost...@debian.org> >> >> * Package name : golang-github-sigstore-sigstore >> Version : 1.5.1-1 >> Upstream Author : The Sigstore Authors <i...@sigstore.dev> >> * URL : https://github.com/sigstore/sigstore >> * License : Apache-2.0 >> Programming Lang: Go >> Description : Common go library shared across sigstore services and >> clients >> >> sigstore/sigstore contains common Sigstore code: that is, code shared >> by infrastructure (e.g. Fulcio and Rekor) and Go language clients (e.g. >> Cosign and Gitsign. >> >> > > -- > regards, > Reinhard > > > -- regards, Reinhard
