-
Notifications
You must be signed in to change notification settings - Fork 4
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Refactor SCAI generator APIs into pkg/ #38
Conversation
Signed-off-by: Marcela Melara <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Various comments, I think this is basically fine. Is pkg/
just to adopt the convention?
Yes, and I want to separate the CLI from the underlying SCAI "attestor" APIs and have those be importable independently. |
Signed-off-by: Marcela Melara <[email protected]>
@alanssitis ptal! |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm, I wonder if we should consider moving scai-gen
out of the demo?
I'll create an issue discussing this more in-depth in a bit :P
Should we add @alanssitis as a maintainer? Also, totally agree that scai-gen should eventually be moved out of this repo, and probably into go-witness as part of the broader in-toto golang consolidation efforts. |
This PR refactors the core SCAI predicate generator APIs into
pkg/
for external usage outside the CLI.An anticipated usage of these refactored APIs will be in the build image attestation PoC for the SLSA workstream on Hardware Attested Platforms.
This also fixes a couple of related documentation bugs.