►
From YouTube: Sigstore Community Meeting - August 22, 2023
Description
No description was provided for this meeting.
If this is YOUR meeting, an easy way to fix this is to add a description to your video, wherever mtngs.io found it (probably YouTube).
A
Alrighty
welcome
everybody,
as
always,
if
you'd
like
to
please
sign
in
we'll,
be
doing
a
project
around
Robin,
we
have
some
exciting
updates
today,
particularly
for
documentation
and
we'll
talk
a
little
bit
about
Outreach
and
events
feel
free
to
add
anything
to
the
section
if
you'd
like
and
then
also
for
any
other
business.
A
If
there's
anything
you'd
like
to
discuss,
that's
not
already
mentioned
above
feel
free
to
add
a
note,
so
I
think
we'll
jump
right
in
for
recore,
fossil
or
cosign
updates
games
that
you
want
to
mention
the
the
proposals
here
since
I
see
you're
here,
yeah.
B
Sure
so
this
I
have
a
proposal
for
record
to
use
the
mySQL
database
as
sort
of
like
the
source
of
Truth
to
kick
off
some
other
events,
such
as
writing
to
redis
and
publishing
events
about
new
entries
to
publishing.
B
This
should
hopefully
be
a
bit
more
stable
than
the
API
server
just
trying
to
send
those
events,
and
then
hopefully
they
succeed
in
you
know
not
having
a
great
story
if
they
don't
and
the
other
proposal
is
to
support
attestations
for
Harbor
back
Keys
such
as
UB
Keys
and
full
Co
certs,
so
I
welcome
any
comments.
I
appreciate
any
input.
A
Thanks
so
much
for
filing
those
James
I
think
they're
they're
both
really
good
proposals
that
kind
of
cover
some
areas
we
haven't
touched
on
before
I
think
the
recore
one
in
particular
is
it's
really
nice
to
see.
I
think
that's
a
really
tough
problem
around
consistency
between
multiple
data
sources.
So
it's
cool
to
see
that
there's
there's
a
solution
out
there
for
that.
B
A
Yes,
I,
agree,
recore
I,
believe
I
know
I've
made
one
change
recently
around
improving
an
identities
API,
so
it's
a
little
bit
easier
to
extract
the
verifiers
and
I
believe
there's
just
a
few
more
bug
fixes
that
need
to
go
in
cosine
I.
Think.
Last
week
we
talked
about
cutting
a
release,
so
I'll
follow
up
on
that.
But
that'll
come
with
a
bunch
of
bug,
fixes
that
have
been
reported
recently.
A
All
right,
I
think
that's
about
it.
For
those
projects,
I,
don't
see
anybody
from
the
client's
sides.
I'm
not
aware
of
any
recent
updates.
Was
there
anything
that
people
want
to
chat
about
for
clients.
A
Cool
well
we'll
move
right
on
I,
don't
think,
there's
any
updates
for
infrastructure
either
we
haven't
made
any
recent
changes.
A
I
think
it
was
a
couple
weeks
ago
that
we
did
the
move
to
a
new
load
balancer
and
that
went
smoothly.
So
no
updates
there,
I
guess
one
small
update
for
tough
is
that
I've
made
a
change
to
the
staging
tough
metadata,
which
I
think
is
mostly
only
relevant
for
clients.
But
if
you
are
reliant
on
the
staging
metadata,
there's
been
a
minor
update,
so
your
client
will
go
pick
it
up
automatically.
A
C
So
you
know:
we've
just
completed
the
re-platform
to
Hugo,
you
know
so,
a
fairly
significant
switch
over
with
a
fairly
completely
new
site.
You
know,
I
encourage
you
to
take
a
look
at
it
and
see
what
you
think
it
we
did.
Club
manage
to
close
with
the
re-platform.
We
managed
to
close
a
couple
of
long-standing
bugs
so
one
being
the
caching
issue,
it
does
seem
to
be
resolved
and
then
another
being
issue
some
issues.
C
People
had
with
the
old
search
and
with
the
re-platform
we've
switched
to
a
flex,
search
for
the
for
the
indexing
and
searching
on
the
site,
and
that
you
see
that
you
know
seems
to
be
working
better
and
and
people
who
had
opened
bugs
I
I
checked
in
with
them
to
see
if
the
new
site
fixes
those
and
it
seemed
like
they
did
so
I
closed
those
issues,
and
you
know
I
do
think
that
you
know
that
it's
it's
Hugo,
it's
it's!
It's
a
you
know
it's
pretty
fast.
C
It's
a
fast
site
and
I
think
it
also
may
open
us
up
put
us
in
a
good
position
if
we
choose
to
to
add
teachers
down
the
line
such
as
versioning
and
different
language
being
making
it
a
multilingual
side
if
we
choose
to
go
in
those
directions
in
the
future,
so
that's
I
think
those
are
good
things,
of
course,
with
a
re-platform.
You
know
you
get,
there's
new
bugs,
there's
regressions.
C
You
know
we're
right
now,
working
on
a
PR
to
fix
some
issues
with
links.
There's
a
new
there
was
a
new
item
hired
added
to
the
to
the
link
hierarchy,
which
breaks
a
lot
of
older
links,
which
in
general,
wouldn't
be
that
big
of
a
deal
with
you
know
considering
we
just
reorganize
the
content
anyway,
and
a
lot
of
those
links
have
been
changed
anyhow,
but
I
I
do
agree.
You
know
some
someone
was
commenting
and
the
normal
coder
was
commenting.
C
You
know
that
that
it
does
kind
of
make
the
URLs
kind
of
a
little
redundant,
so
I'm
working
on
simplifying
the
URL
structure,
taking
that
that
added
piece
out
and
which
should
should
tidy
things
up
a
little
bit.
But
if
you
run
into
issues,
if
you
run
to
bugs
please
open
issues,
I'm
sure
there
will
be
other.
You
know
things
that
occur
to
us
or
things
that
you
know.
There's
a
few
changes
to
the
appearance
like,
for
example,
the
the
menus
on
the
sidebar
are
collapsible
and
so
on.
A
Fantastic
work
on
this
Patrick
I
I'd
love
to
see
this
I
mean
you
know,
you
know,
I
hadn't
tried
out
search.
Yet
this
is
basically
instantaneous.
There
was
there
was
lag
before
I
mean
the
site,
looks
fantastic,
that
caching
issue
I'm,
so
happy
is
resolved
now.
So
great
work
on
this
cheers.
A
I
guess
one
thing
to
call
out
too:
is
that
I
don't
believe
we
mentioned
this
I
think
two
weeks
ago,
but
there
are
now
sections
that
are
a
little
bit
different
that
are
focused
more
on
user
Journeys,
rather
than
the
individual
components
of
the
system.
So
that's
kind
of
one
thing
to
note
here:
these
individual
components
are
focused
a
little
bit
more
on
deep
Dives
and
as
a
developer.
A
What
you
might
want
to
do,
whereas
most
users
likely
will
interact
with
the
signing
verifying
Key,
Management
sections,
so
that's
another
nice
Improvement
should.
C
Hopefully,
I
want
to
note
that
that's
John
van
edenberg's
work,
so
you
know
Kudos
in
for
that.
D
D
Hi
everyone
I'm
a
normal
Corner
whom
Gus
joined
the
source
documents
website
I
try
to
contribute
some
VR
only
document
and
I
am
so
happy
to
find
that
the
document
website
just
regrets
from
the
Knox
into
Google
and
actually
I'm
trying
to
do
something
with
six
store.
Just
like
I
I
just
walk
to
try
to
work
it
and
translate
all
the
documents
into
Chinese.
D
I
found
some
problems.
There
is
some
something
I
I
can
be
accept,
just
like
some
metal
right.
It,
perhaps
not
very
good
or
the
website
May,
just
just
a
little,
not
perfect.
So
I
I
just
work
with
the
English
document
and
try
to
solve
these
things.
Perhaps
we
can
we
can.
We
can
try
more
something,
so
I
would
just
want
to
know
if
it
will
have
a
plan
to
change
the
documents
start
and
we
will
update
how
long
it
will
be
suitable,
and
perhaps
we
can
make
a
release
for
it.
C
Can
I
describe
it
and
say
that
the
PRS
that
you've
created
have
been
really
good
and
I
learned
a
lot
from
reading
the
one
that
you
wrote
on
the
the
markdown
spec
list,
indenting
and
stuff
like
that?
So
thank
you
for
those
and
I
will
say:
if
you
can,
you
start
the
Chinese
documentation
and
you
want
to
share
a
repo
with
the
some
of
the
documentation
and
some
information
on
it.
I
will
start
the
you
know.
I
can
look
into
creating
a
more
multilingual
doc
set
if
that's
of
interest
to
the
community.
C
A
Awesome
well
thanks,
so
much
for
taking
a
look
at
that
translation.
A
Cool
so
moving
right
along
I
believe
there
were
no
new
updates
for
events.
The
ones
I
still
call
out
is
that
we
have
a
research
Workshop
focused
on
transparency
systems.
Submissions
are
due
September
1st,
so
deadlines
come
up
if
you'd
like
to
submit
something
for
that
feel
free
to
reach
out
to
myself
I'm
happy
to
talk
a
little
bit
more
about
the
purpose
of
the
workshop
and
what
we're
looking
for
I.
A
Believe
then
the
next
major
event
will
be
mid-september
when
OSS
EU
happens
and
open
ssf
day
EU
I
know
some
members
from
the
community
are
giving
talks
on
some
related
topics
in
supply
chain
security,
so
I'll
I'll
call
those
out
in
the
next
community
meeting,
but
best
of
luck
to
everyone
given
talks.
A
All
right,
I
don't
see
too
much
for
any
other
business,
so
the
one
thing
I
just
wanted
to
touch
on
just
for
a
little
bit
of
reducing
meetings
where
right
now,
there's
there's
minimal
attendance.
I
looks
like
for
office
hours.
We
haven't
had
a
lot
of
attendance,
so
I'd
like
to
merge
office
hours
into
the
community
meeting
so
effectively.
The
any
other
business
section
will
also
include
office
hours.
It's
been
very
similar
already
in
that.
A
If
people
have
questions,
this
is
the
perfect
time
to
bring
them
up.
A
lot
of
people
want
to
show
off
a
new
integration.
This
is
a
perfect
time
to
bring
it
up.
I
link
to
the
office
notes,
office
hours
notes
just
so.
We
have
those
here
for
the
future,
but
I
have
at
this
point,
canceled
the
office
hours
meeting.
So
if
you
attend
it
next
week,
no
need
to
do
so.
Please
just
come
to
the
community
meeting
in
two
weeks
from
now.
A
Awesome
any
other
topics
that
anybody
wants
to
discuss.
A
Cool
well,
this
might
be
a
short
and
sweet
meeting.
Were
there
any
new
members
of
the
community
that
wanted
to
introduce
themselves.
This
is
kind
of
we
reserved
the
last
little
bit
of
time
to
say
hi
to
anybody
who's
new
to
the
community.
D
A
D
Horse
platform,
just
like
GitHub
in
China,
we
just
look
at
the
sixth
floor
and
I
I
call.
It
is
a
very
interesting
things
we
have.
We
will
try
something
just
like,
because
some
special
reason,
the
sea
Source,
was
on
gcp
through
Club
platform
and
because,
like
perhaps
China's
Network
and
cannot
reach
it,
so
we
will
just
want
to
try
something
to
help
this
thought
to
in
spread
in
Chinese
China
and
to
get
more
developer
or
user
to
to
try
it.
A
That's
that's
great
to
hear
welcome
to
the
community.
We're
really
excited
to
have
you
and
yeah.
If
you
want
to
chat
any
any
more
about
six
or
feel
free
to
reach
out
on
select.
A
Awesome
well
hope
everybody
has
a
has
a
great
week,
have
a
good.