DFSG NEW Queue

DFSG, Licensing & New Packages Team

golang-github-in-toto-go-witness 0.9.2-1

Package Information

Descriptionin-toto Go library for transparency log witness

A client library for in-toto Witness written in Go.

Features: - Creation and signing of in-toto attestations - Verification of in-toto attestations and associated signatures with: - Witness policy engine - OPA Rego policy language - A growing list of attestor types defined under a common interface - A selection of attestation sources to search for attestation collections - Resilient Fulcio signer with automatic retry logic and improved error handling for GitHub Actions environments

For more detail regarding the library itself, see: https://pkg.go.dev/github.com/in-toto/go-witness

This package contains the Go development library.

MaintainerDebian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed BySimon Josefsson <simon@josefsson.org>
Sponsorsimon@josefsson.org
Distributionunstable
Architectureall
VCSgit: https://salsa.debian.org/go-team/packages/golang-github-in-toto-go-witness.git (browse)
Closes#1089740
Blocked Bugs#1121251 (normal)
Trackerhttps://tracker.debian.org/pkg/golang-github-in-toto-go-witness
Uploaded9 hours ago

New Package Report

.changes
Distributionunstable
DateSun, 08 Mar 2026 09:33:31 +0100
Sourcegolang-github-in-toto-go-witness
Version0.9.2-1
Changed-BySimon Josefsson
Architecturesource all
Changelog
golang-github-in-toto-go-witness (0.9.2-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1089740)
.dsc
Priorityoptional
Componentmain
Package-Listgolang-github-in-toto-go-witness-dev deb golang optional arch=all
Sectiongolang
debian/copyright
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Source: https://github.com/in-toto/go-witness
Upstream-Name: go-witness

Files: *
Copyright: 2021 TestifySec, LLC
           2021-2025 The Witness Contributors
License: Apache-2.0

Files: imports_nonwindows.go
Copyright: 2024 Witness Contributors
License: Apache-2.0
Comment: https://github.com/in-toto/go-witness/pull/672

Files: attestation/factory_test.go
Copyright: 2023 The Archivist Contributors
License: Apache-2.0

Files: debian/*
Copyright: 2024-2026 Simon Josefsson <simon@josefsson.org>
License: Apache-2.0
Comment: Debian packaging is licensed under the same terms as upstream

License: Apache-2.0
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
 You may obtain a copy of the License at
 .
 https://www.apache.org/licenses/LICENSE-2.0
 .
 Unless required by applicable law or agreed to in writing, software
 distributed under the License is distributed on an "AS IS" BASIS,
 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.
Comment:
 On Debian systems, the complete text of the Apache version 2.0 license
 can be found in "/usr/share/common-licenses/Apache-2.0".

Back to Dashboard | View all reviews for this package