cosigned API task force

[Matt Moore]

Hello sigstore community,

   If you are NOT interested in helping shape the cosigned webhook's configuration story, you can stop reading now.

The cosigned webhook (today) is fairly simple (configured by a single secret!), and we keep getting requests to support more scenarios.  A while back this issue was opened to kick start things: https://github.com/sigstore/cosign/issues/594.  I think this effort would benefit from some online working sessions to make sure folks are aligned on the goals and scope for things, but the regular community calls seem like an inappropriate setting for some of these discussions because of how many folks attend (an "expensive meeting"), and how high-level it generally is.  To that end, I wanted to kick off a limited run "task force" with (ideally) a small handful of interested and active stakeholders to align and hammer out a specification to present back to the broader community.

If you are interested in participating, then please reach out to me here, or on slack and I will add your name to a list of folks I'm gathering.  In an effort to manage the size of this group, please try to identify a "point person" (or two), if your organization is interested, it will make both scheduling and discussions so much easier.  Once we have a list, I'll send around a Doodle to try and find a time that works the best for that group.

thanks in advance!

-M

--

Matt Moore

[Jim Bugwadia]

Thanks Matt! I am interested in participating and helping.

Regards,

Jim

[Jason Hall]

Count me in!

[Michael Lieberman]

Same!

[Batuhan Apaydın]

we (w/Furkan Türkal) are interested in as well 🥳

30 Kasım 2021 Salı tarihinde saat 23:04:26 UTC+3 itibarıyla mliebe...@gmail.com şunları yazdı: