Attestation Transparency Doc!

[Dan Lorenc]

Hey Sigstore Dev,

This doc was shared for feedback a few weeks ago, but it's ready for another look now!

https://docs.google.com/document/d/12JKXypgnDNQ2NBJYR73zLktSXj2pfBJcQWl675n_VdE/edit#

We now have support for in-toto Attestations in Rekor, and this work will allow users to store and query rich attestations containing source code provenance and SBOMs!

The WIP PR is available here: https://github.com/sigstore/rekor/pull/321

Dan Lorenc