- Sandbox and Prod environments setup
- Rate limiting/token system in place
- Load testing out to 100QPS in sandbox (numbers ytd)
- Official release of client binaries
- Timestamp implementation
- First official cosign release published (and self-signed!)
- Distroless images signed with cosign, checked upstream
- Rekor tlog support available by default (non experimental)
- Keyless support in experimental
- Experimental service available with CT log!
- Intermediate cert system in place, main certs offline
- Root CA rotation plan draft published
- Generic signing sigstore client release published (and self-signed!)
- Last Updated: 11/05/2021