release-tools icon indicating copy to clipboard operation
release-tools copied to clipboard

Stop generating Sigstore disjoint verification materials (crt/sig)

Open sethmlarson opened this issue 2 years ago • 0 comments

sigstore-python v1 currently generates disjoint verification materials (.crt/.sig) and bundles (.sigstore). v2 only generates bundles by default, and bundles are going to be the verification material of choice going forward.

Once https://github.com/python/pythondotorg/issues/2300 has landed and been documented we can remove the generation of disjoint verification materials from release-tools, instead only generating bundles.

sethmlarson avatar Sep 12 '23 19:09 sethmlarson