From a25e040433b460ca396ddf16d669c56e77454e30 Mon Sep 17 00:00:00 2001 From: Luke Hinds <7058938+lukehinds@users.noreply.github.com> Date: Wed, 17 Jun 2020 14:15:13 +0100 Subject: [PATCH] Update README.md --- README.md | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index 10adc8b..01d12f9 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,9 @@ # Rekor -Rekor is a (planned to be) cloud native cryptographic, immutable, append only software -release ledger. +Rekor is a cryptographic, immutable, append only software release ledger. + +It is planned to be used as part of a cloud native build pipeline, but also could be used +in any context where software packaging (and later planned, files) require attestation. It uses a trillian backend to store in-toto style metadata into an immutable merkle tree. @@ -17,9 +19,9 @@ developer's signature embedded within the in-toto link file. If you had not already noticed, rekor is in very early development, so its not ready for production use, however if you would like to contribute, then please do. -Its very simple at the moment, but plans are to work more with link files to allow automation of -integrity checks and design how other link file content such as materials can be stored and then -queried in a useful manner. +Its very simple at the moment, but plans are to work more with link files and other manifest structures +to allow automation of integrity checks and design how other link file content such as materials can +be stored and then queried in a useful manner. The trillian components are: @@ -99,4 +101,4 @@ rekor get --tlog_id=2587331608088442751 --linkfile tests/package.link Should your file be returned in full, good news, it matches. Should no return occur, then something is up (this of course will be handled -better in time). \ No newline at end of file +better in time). -- GitLab