Signed-off-by: Bob Callaway <bcallawa@redhat.com>

* add endpoint for public key and return signed tree head with loginfo

Signed-off-by: Bob Callaway <bcallawa@redhat.com>

also adds --log-index parameter to CLI verify command

Signed-off-by: Bob Callaway <bcallawa@redhat.com>

Signed-off-by: Bob Callaway <bcallawa@redhat.com>

Signed-off-by: Bob Callaway <bcallawa@redhat.com>

This allows us to skip sticking it onto each request context and retrieving it.

Signed-off-by: Dan Lorenc <dlorenc@google.com>

This retargets #67 at main instead of openapi branch

* add xml & yaml format support

* add attributes to denote files that are generated so GH skips them on diffs

* turn on gosec and resolve blocking issues

simplify upload command to reuse common PKI package across client & server

Some changes:
- import names (app -> api, logging -> log)
- Commands package (cmd -> app)

This also breaks the go module dependency on rekor-server.

This is the first step in code reorganization. This follows the patterns
from kubernetes/kubernetes - each binary gets a directory under cmd/.
The main.go file for each binary lives there.
The commands live under cmd//app.

Implement upload command

Accept flags artifact-url,public-key, signature and validate GPG formatting and verify file signature

This change refactors client.go and file.go into an `app` package.

This will make it more easily consumed by rekor-ctl

Once this change is in, I will push rekor-ctl up and then look to
further refactor use of code already duped in rekor-server

Seems to work for Node right now. I haven't tested on linux.

Gets a specific leaf by the leaf Index

`rekor getleaf --index ($index)

Based on comment in PR #19

If we have a previous set of values, we also check the consistency proof between
these two to make sure the tree has not been tampered with.