Skip to content

Conversation

@nathanwn
Copy link
Member

This pull request adds a tutorial for the VSA generation feature, accounting for changes made in #685.

Some other minor modifications are made to also account for #685.

@oracle-contributor-agreement oracle-contributor-agreement bot added the OCA Verified All contributors have signed the Oracle Contributor Agreement. label Apr 12, 2024
Signed-off-by: Nathan Nguyen <nathan.nguyen@oracle.com>
@nathanwn nathanwn force-pushed the nathanwn/vsa-gen-tut branch from 7e147b4 to 042d479 Compare April 12, 2024 09:10
@nathanwn nathanwn self-assigned this Apr 12, 2024
@nathanwn nathanwn marked this pull request as ready for review April 12, 2024 09:11
Use case
--------

Imagine you are the producer of an artifact. You want consumers of this artifact to be able to verify it. In order to simplify the verification process, you can use Macaron to verify the artifact prior to publishing it to consumers and generate a Verification Summary Attestation (VSA), thus allowing for delegated verification on consumers' side if they trust you as a verifier.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you please also mention how the VSA can be published and used by end users? For example, it can be published alongside the artifact?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I added a sentence in eaa2486.

Signed-off-by: Nathan Nguyen <nathan.nguyen@oracle.com>
Copy link
Contributor

@tromai tromai left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. I don't have any other comment . Thanks!

Signed-off-by: Nathan Nguyen <nathan.nguyen@oracle.com>
Signed-off-by: Nathan Nguyen <nathan.nguyen@oracle.com>
@nathanwn nathanwn merged commit f0ff6c1 into staging Apr 17, 2024
@nathanwn nathanwn deleted the nathanwn/vsa-gen-tut branch April 17, 2024 03:37
art1f1c3R pushed a commit that referenced this pull request Nov 29, 2024
Signed-off-by: Nathan Nguyen <nathan.nguyen@oracle.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

OCA Verified All contributors have signed the Oracle Contributor Agreement.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants