Lukas Pühringer

Thanks for untangling the git history of #357. Before we move forward, please make sure that - all comments from my last review in https://github.com/in-toto/in-toto/pull/357#pullrequestreview-459896874 are addressed, - your new...

Thanks for documenting this request, @adityasaky. I suggest we add a new "Usage Examples" top-level section to [in-toto.readthedocs.io](https://in-toto.readthedocs.io/en/latest/) to which we move the already existing ["Layout Creation Example" page](https://in-toto.readthedocs.io/en/latest/layout-creation-example.html) plus...

I totally agree. The idea has been around since the first commit, but we removed the empty `bundle` modules at some point (https://github.com/in-toto/in-toto/commit/1b344c8d39e51714ccd2d3c9dd0df09ef15c7921) since we were only dragging them along...

Here's a summary of the possibilities for shipping out in-toto metadata, we discussed last week: 1. Package layout and link metadata with the final product. 2. Provide a mapping file...

Thanks for the contribution, @marmarek and @fepitre! Your patch revives an interesting discussion from https://github.com/in-toto/docs/issues/27, where we looked into ways of matching the final product on the client to the...

The issue is related to the discussion about the preliminary verification (https://github.com/in-toto/layout-web-tool/issues/20) of the preliminary layout, generated in the in-toto layout wizard. E.g. it would be interesting to verify if...

Why don't you think it's a good idea? In my opinion it would be convenient to have a command line interface and I thought that we had a similar take...

As a compromise we could provide a variant of `in-toto-verify` that does not fail early (as it does now) but rather tries to verbosely walk through all verification routines. What...

See #162 for WIP implementation.

As a matter of fact, our summer intern @isachit has already created such basic grep-like inspection command line tools, which are hosted as a separate project (c.f. [in-toto/in-toto-inspections](https://github.com/in-toto/in-toto-inspections)). What I...