-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Optionally carry & verify a SLSA/in-toto build-provenance attestation alongside the manifest (npm-provenance-style)
enhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededStatus: Open.#25 In greenrobotllc/blacklight;Send a scoping email to the COSE/SCITT mailing list before any IETF draft work
enhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededStatus: Open.#24 In greenrobotllc/blacklight;Standardization readiness: make blacklight IETF-submittable (log-agnostic COSE/SCITT binding + BLAKE3 proof type)
documentationImprovements or additions to documentationImprovements or additions to documentationenhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededStatus: Open.#23 In greenrobotllc/blacklight;Package-manager augment mode: apt/dnf verification plugin (augment existing trust, don't replace it)
enhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededStatus: Open.#19 In greenrobotllc/blacklight;Log-agnostic transparency backend: support sigsum / witnessed logs, not only Rekor
enhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededStatus: Open.#18 In greenrobotllc/blacklight;iroh/QUIC content-addressed transport anchored to the Sigstore-signed BLAKE3 root
enhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededStatus: Open.#16 In greenrobotllc/blacklight;fetch --output - : verified streaming to stdout for pipe-and-forget workflows
enhancementNew feature or requestNew feature or requestgood first issueGood for newcomersGood for newcomersStatus: Open.#15 In greenrobotllc/blacklight;Release manifest: one signed statement over a whole multi-file release
enhancementNew feature or requestNew feature or requestStatus: Open.#14 In greenrobotllc/blacklight;Multi-source parallel fetch from many untrusted mirrors against one signed root
enhancementNew feature or requestNew feature or requestStatus: Open.#13 In greenrobotllc/blacklight;Signed monotonic release version and append-only per-package log for downgrade-evident freshness
documentationImprovements or additions to documentationImprovements or additions to documentationenhancementNew feature or requestNew feature or requestStatus: Open.#12 In greenrobotllc/blacklight;Verified resume via chunk-group-aligned Range requests
enhancementNew feature or requestNew feature or requestStatus: Open.#11 In greenrobotllc/blacklight;Trust policy file plus TOFU pinning so identity/issuer is not hand-typed on every fetch
enhancementNew feature or requestNew feature or requestStatus: Open.#10 In greenrobotllc/blacklight;