Hi Just a heads-up that I am working on packaging rekor for Debian, current effort is under way here: https://salsa.debian.org/jas/golang-github-sigstore-rekor I will merge it here eventually: https://salsa.debian.org/go-team/packages/golang-github-sigstore-rekor It seems like a great number of dependencies are needed, and I'm chaising them down one by one, although for several it raises new problems since Debian has old versions of the package and it isn't clear to me wheter to update the old packages are create new packages for them, especially since some of them have been renamed so the golang package names no longer match. I'm cc'ing both bugs related to this, I think they refer to the same package really. /Simon
Attachment:
signature.asc
Description: PGP signature