Mustafa Gezen
Mustafa Gezen
Currently missing some fields we can add to tbds - [ ] allowed-clients - [x] fix weak-def-symbols - [ ] thread-local-symbols - [ ] objc-constraint - [ ] swift-version
**Description** Currently Rekor uses version `v0.0.0-20200122174316-8cb9fd9c31a8` of `go-rpm`. Neither this or newer version of this RPM library supports newer signature tags like `RSAHEADER` or `DSAHEADER`[rpm docs](https://rpm-software-management.github.io/rpm/manual/signatures_digests.html). This can be problematic...
Currently the signing process assumes that the "Package" size stays consistent post-build and post-sign. This is a small backwards-compatible change that properly sets a post-sign size in the metadata during...
### Describe The Bug When signing repomd.xml, keykeeper can sometimes silently fail. Introducing post-sign verification like with RPMs should address this problem. ### Reproduction Steps 1. 2. 3. . ....
Empty build batches are the result of queueing packages that are only part of a module, or only queueing modules with the "Ignore modules" filter on. Empty batches should not...