Source: golang-github-in-toto-archivista
Section: golang
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Uploaders:
 Simon Josefsson <simon@josefsson.org>,
Build-Depends:
 debhelper-compat (= 13),
 dh-sequence-golang,
 golang-any,
 golang-entgo-ent-dev,
 golang-github-aws-aws-sdk-go-v2-dev,
 golang-github-digitorus-timestamp-dev,
 golang-github-edwarnicke-gitoid-dev,
 golang-github-go-sql-driver-mysql-dev,
 golang-github-google-uuid-dev,
 golang-github-gorilla-handlers-dev,
 golang-github-gorilla-mux-dev,
 golang-github-hashicorp-go-multierror-dev,
 golang-github-in-toto-go-witness-dev,
 golang-github-kelseyhightower-envconfig-dev,
 golang-github-minio-minio-go-dev,
 golang-github-sirupsen-logrus-dev,
 golang-github-spf13-cobra-dev,
 golang-github-stretchr-testify-dev,
 golang-github-vektah-gqlparser-dev,
 golang-gopkg-yaml.v3-dev,
 golang-pq-dev,
Testsuite: autopkgtest-pkg-go
Standards-Version: 4.7.3
Vcs-Browser: https://salsa.debian.org/go-team/packages/golang-github-in-toto-archivista
Vcs-Git: https://salsa.debian.org/go-team/packages/golang-github-in-toto-archivista.git
Homepage: https://github.com/in-toto/archivista
XS-Go-Import-Path: github.com/in-toto/archivista

Package: golang-github-in-toto-archivista-dev
Architecture: all
Multi-Arch: foreign
Depends:
 golang-entgo-ent-dev,
 golang-github-aws-aws-sdk-go-v2-dev,
 golang-github-digitorus-timestamp-dev,
 golang-github-edwarnicke-gitoid-dev,
 golang-github-go-sql-driver-mysql-dev,
 golang-github-google-uuid-dev,
 golang-github-gorilla-handlers-dev,
 golang-github-gorilla-mux-dev,
 golang-github-hashicorp-go-multierror-dev,
 golang-github-in-toto-go-witness-dev,
 golang-github-kelseyhightower-envconfig-dev,
 golang-github-minio-minio-go-dev,
 golang-github-sirupsen-logrus-dev,
 golang-github-spf13-cobra-dev,
 golang-github-stretchr-testify-dev,
 golang-github-vektah-gqlparser-dev,
 golang-gopkg-yaml.v3-dev,
 golang-pq-dev,
 ${misc:Depends},
Description: graph and storage service for in-toto attestations (library)
 Archivista is a graph and storage service for in-toto (https://in-toto.io)
 attestations. Archivista enables the discovery and retrieval of
 attestations for software artifacts.
 .
 Archivista enables you to
 .
  * Store and retrieve in-toto attestations
  * Query for relationships between attestations via a GraphQL API
  * Validate Witness policy without the need to manually list expected
    attestations
 .
 Archivista is a trusted store for supply chain metadata
 .
  * It creates a graph of supply chain metadata while storing
    attestations that
    can be later used for policy validation and flexible querying.
  * It is designed to be horizontally scalable, supporting storing a
    large number
    of attestations.
  * It supports deployment on major cloud service and infrastructure
    providers,
    making it a versatile and flexible solution for securing software
    supply
    chains.
  * It only stores signed attestations to further enhance security and
    increase trust.
 .
 Key Features
 .
  * Native support for storing attestations created by Witness
  * A GraphQL API endpoint and playground
  * Support for MySQL and Postgres database backends
  * Support for S3-compatible object storage
  * A Helm Chart for deployment in Kubernetes environments
  * The ability to download and export attestations to transfer across an
    air gap
  * Support for Darwin, Windows, and ARM architectures.
 .
 This package contains the Go development library.