Comments (3)
cc @marcelamelara @TomHennen @pxp928 @joshuagl @mikhailswift
from protobuf-specs.
Is the idea to just have a single dependency to depend on for being able to unmarshal a work with a bundle?
I might be wrong here, haven't thought this through in detail, but a client would still need to perform two JSON unmarshal passes.
The DSSE envelope captuers the payload
as a byte stream, which means that we can't rely on a single run of protojson
unmarshal, as the final struct will contain a byte array, that has to be JSON parsed again to get the in-toto statement.
from protobuf-specs.
Is the idea to just have a single dependency to depend on for being able to unmarshal a work with a bundle?
That, plus flattening the subdependencies here: if a dependant includes both sigstore-protobuf-specs
and in-toto-attestation
in Python, then they'll end up with two different Protobuf runtimes (betterproto
and protobuf
, respectively). This arguably isn't a big deal at all but it set off my "ick" alarm 🙂
I might be wrong here, haven't thought this through in detail, but a client would still need to perform two JSON unmarshal passes.
Correct -- I believe the main value here is not in having the two unmarshal as part of the same "pass," but just in having the data models collected together.
from protobuf-specs.
Related Issues (20)
- Drop namely/protoc-all in favour of a custom Dockerfile? HOT 3
- Optimize the Rust codegen HOT 2
- Stabilize the bundle format HOT 5
- jsonschema: setting `--platform` breaks targets on aarch64-darwin HOT 1
- jsonschema: Docker container dependency conflict
- Create a script to generate CHANGELOG
- Release v0.2.1 HOT 4
- CA uri provide grpc uri as well? HOT 1
- Python: switch release workflow to trusted publishing
- Bundle Media Type HOT 11
- trustroot: Should OAuth issuer(s) be included? HOT 4
- FR: Separate canonicalized_body from TransparencyLogEntry? HOT 7
- Removing the root cert from the bundle's cert chain? HOT 48
- Rust bindings HOT 1
- [Proposal] Require inclusion proofs HOT 1
- Maintain a CHANGELOG of protobuf changes between versions HOT 2
- Upload v0.2.0 to Maven Central HOT 9
- `buf` tooling to abstract over multi-language bindings
- [RFC] Rehome `io.intoto` namespace under `dev.sigstore`? HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from protobuf-specs.