This repository was archived by the owner on Mar 27, 2023. It is now read-only.
This repository was archived by the owner on Mar 27, 2023. It is now read-only.
Store the VEX source data in an OCI registry #9
Description
Currently, we read the known VEX data for a project from a simple file. At some point I think we should store it in the registry using a schema that makes it easy to find to update and use when attesting. @jdolitsky thinks we should use the new OCI Reference Types and I'm down for it.