You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
sigstore-python chooses to use a specific signing algorithm for signing with the signing certificate: this seems like a fine decision.
Even for verifying the signing certificate signature, sigstore clients are not required to support more than one key type... but it would make sense to support the low hanging fruit in https://github.com/sigstore/architecture-docs/blob/main/algorithm-registry.md (IOW the algorithms supported by cryptography but not yet by sigstore.verify: RSA, EdDSA).