Skip to content
This repository has been archived by the owner on Feb 26, 2024. It is now read-only.

Issues: Shopify/ruby-sigstore

21 Open 13 Closed
21 Open 13 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Considerations for storing gem signatures in rubygems.org
#65 opened Mar 15, 2022 by rochlefebvre
Considerations for listing signer identities in the gemspec
#64 opened Mar 14, 2022 by rochlefebvre
Add Shopify entry into https://github.com/sigstore/friends
#60 opened Jan 25, 2022 by rochlefebvre
Notes on using refresh tokens to decouple browser authentication from requesting a certificate chain
#59 opened Jan 24, 2022 by rochlefebvre
Only consider signatures from emails listed in the gemspec during signature verification
#58 opened Jan 18, 2022 by rochlefebvre
Fail gem signing unless the access token's verified email address appears in the gemspec's list of maintainers
#57 opened Jan 18, 2022 by rochlefebvre
Implement an exception hiererarchy for the plugin
#52 opened Dec 17, 2021 by rochlefebvre
Implement support for the --fulcio-host argument in gem sign and gem build --sign.
#47 opened Dec 15, 2021 by rochlefebvre
Implement support for the --rekor-host argument in every command
#46 opened Dec 15, 2021 by rochlefebvre
Revise the README.md file
#43 opened Dec 9, 2021 by rochlefebvre
Enable environment variables to set an id-token snack Easy task that does not require a ton of context
#42 opened Dec 2, 2021 by doodzik
Support the signing of multiple gems
#32 opened Nov 23, 2021 by rochlefebvre
Reinstate the license verification workflow snack Easy task that does not require a ton of context
#26 opened Nov 18, 2021 by rochlefebvre
Run ruby-sigstore on every public ruby gem release of shopify blocked
#25 opened Nov 18, 2021 by doodzik
Enable shipit to sign a gem on behalf of a user Severity: 1 Urgent Severity
#24 opened Nov 18, 2021 by doodzik
Cache and retrieve issuing certificates by their authority subject identifier
#17 opened Oct 30, 2021 by rochlefebvre
Validate the cert chain during signature verification
#16 opened Oct 30, 2021 by rochlefebvre
gem verify option to error on unknown signing cert subject
#14 opened Oct 30, 2021 by rochlefebvre
gem verify option to warn on unknown signing cert subject
#13 opened Oct 30, 2021 by rochlefebvre
Compare gemspec's email field against subject of signing certificate
#12 opened Oct 30, 2021 by rochlefebvre
Add a rudimentary test suite
#7 opened Oct 29, 2021 by doodzik
1
ProTip! What’s not been updated in a month: updated:<2024-10-27.