Martin Sablotny

Repo-tracking initial functionality

1

This PR adds initial functionality to read and hash repositories. 1) the configs are read 2) the repositories are cloned and/or updated to retrieve branches, tags and commit 3) the...

This change adds commit preselection functionality to avoid comparing against all commits for the dependency and also enable lookups without a package. For the protobuf version 21.0 hashes the change...

As mentioned during the meeting this the re-implementation I was working on. It provides model signing through - sigstore - bring your own key (ecdsa) - bring your own PKI...

Add functionality to sign DSSE envelopes with arbitrary payloads

1

#### Summary Added functionality to sign DSSE envelopes with arbitrary payloads. This is to ensure model signing can in the future use sigstore with its own manifest format inside of...

Add signing and verification CLI scripts.

22

#### Summary This PR adds scripts to sign and verify `FileLevelManifest`. It combines the existing functionality to create a fully working proof of concept. Signing workflow: 1. The model folder...