Tanner Jones

I am working on a security research project and your tool would be a great use. I am currently checking newer versions such as 4.0.5. The tool is limited to...

Support file-level attestation verification and tarball-only attach mode in witness attach attestation

3

## What this PR does / why we need it **Description** This MR introduces the following enhancements and fixes to the witness attach attestation command: File-level Attestation Verification: Adds a...

[Feat]: Attach capability to attach attestations to OCI artifact

2

**Describe the solution you'd like:** I would like to add the ability to attach attestations e.g. [in-toto](https://in-toto.io/) to OCI artifacts, such as container images, using a workflow similar to cosign...

Feature/insecure flag

9

**What type of PR is this?** > Uncomment one (or more) `/kind ` lines: > /kind bug > /kind cleanup > /kind design > /kind documentation > /kind failing-test feature...