Skip to content
Snippets Groups Projects
Unverified Commit a25e0404 authored by Luke Hinds's avatar Luke Hinds Committed by GitHub
Browse files

Update README.md

parent 0da07bea
No related branches found
No related tags found
No related merge requests found
# Rekor
Rekor is a (planned to be) cloud native cryptographic, immutable, append only software
release ledger.
Rekor is a cryptographic, immutable, append only software release ledger.
It is planned to be used as part of a cloud native build pipeline, but also could be used
in any context where software packaging (and later planned, files) require attestation.
It uses a trillian backend to store in-toto style metadata into an immutable merkle tree.
......@@ -17,9 +19,9 @@ developer's signature embedded within the in-toto link file.
If you had not already noticed, rekor is in very early development, so its not ready for production
use, however if you would like to contribute, then please do.
Its very simple at the moment, but plans are to work more with link files to allow automation of
integrity checks and design how other link file content such as materials can be stored and then
queried in a useful manner.
Its very simple at the moment, but plans are to work more with link files and other manifest structures
to allow automation of integrity checks and design how other link file content such as materials can
be stored and then queried in a useful manner.
The trillian components are:
......@@ -99,4 +101,4 @@ rekor get --tlog_id=2587331608088442751 --linkfile tests/package.link
Should your file be returned in full, good news, it matches.
Should no return occur, then something is up (this of course will be handled
better in time).
\ No newline at end of file
better in time).
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment