Sally O'Malley

Resolves https://github.com/sigstore/gitsign/issues/108 #### Summary Refactor verify logic to be consumable by gitOps tools #### Release Note NONE

Verify logic refactor to make consumable by other tools

1

Refactor verify logic so that other gitOps tools (such as https://github.com/containers/fetchit.git) can verify gitsign-d commits without cp/pasting bits from gitsign internal package WIP fetchit with proposed refactor: https://github.com/containers/fetchit/pull/230

move sign pkg to pkg/sign

2

#### Summary https://github.com/sigstore/cosign/issues/1660 Currently the signing logic lives in `cmd/cosign/cli/sign`, this PR moves signing logic to `pkg/sign`. Moving to pkg/sign allows other projects to include in their tools. #### Release...

**Describe the feature you'd like to have.** We need unit-tests for scribe CLI

Add trigger methods for synchronization

2

Currently, the only method for TriggerSpec is a cronspec string. A webhook endpoint trigger and/or a kubeapi trigger will provide more flexibility. With these methods, an on-demand synchronization will be...

kube-play pod difficult to remove

1

This could be on my system only, but with kube-play method, the only way to clean up the pods after is with `sudo rm -rf /var/lib/containers/storage` There seems to be...

access git over ssh rather than http

3

we want to allow accessing git by ssh, with a provided (private) ssh key mounted to fetchit pod - probably will want this to be the default once we prove...

* Should fetchIt rollback to a last know good commit when it encounters an `Apply` error? * Should fetchIt track back commits and refuse to checkout a bad commit? In...

To determine a stale artifact * compare list of fetchit-created files & services on the host against configTargets, if a file exists within known-list that is missing from configTarget, remove...

add CI workflow for podman auto-update with non-root user

2

The non-root podman auto-update is untested, needs a workflow