Skip to content

v3.1.0
Compare
Choose a tag to compare
@woodruffw woodruffw released this 31 Jul 21:05
· 93 commits to main since this release
v3.1.0
3cda2b5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.

Added

  • API: dsse.StatementBuilder has been added. It can be used to construct an
    in-toto Statement for subsequent enveloping and signing.
    This API is public but is not considered stable until the next major
    release.
    (#1077)

  • API: dsse.Digest, dsse.DigestSet, and dsse.Subject have been added.
    These types can be used with the StatementBuilder API as part of in-toto
    Statement construction.
    These API are public but are not considered stable until the next major
    release.
    (#1078)

Changed

  • API: verify_dsse now rejects bundles with DSSE envelopes that have more than
    one signature, rather than checking all signatures against the same key
    (#1062)
Assets 11
Loading