This library is for signing in-toto attestations with OpenPubkey.
Two functions are provided:
SignInTotoStatementtakes an in-toto statement and returns a signed DSSE envelope.VerifyInTotoEnvelopetakes a signed DSSE envelope, verifies the signature, and returns the in-toto statement
That's it!