Hi Leo, I hope you are well. Now that all dependencies to build this package are in place, I've taken the liberty of uploading the package to debian/experimental and pushed my sources to https://salsa.debian.org/go-team/packages/golang-github-sigstore-sigstore
I really don't want this to be seen as an ITP takeover, since we've been talking on this ITP for a while, I hope that's okay. Please take a look at this repo and at https://ftp-master.debian.org/new/golang-github-sigstore-sigstore_1.4.0-1.html and let me know what you think. Best, -rt -- regards, Reinhard