Pushing to enable custom root CAs for orgs with such PKI in place

[anoncam]

gitsign/README.md

Line 150 in e8d1ed2

1. The sigstore CA root is not a part of

@DODTeam1 - the roots from cyber.mil has this bundle, which would extend a great deal of signing support using existing PKI for a moderately sized vertical...interested if it is more desirable to have this user configurable, or baked in.

[dlorenc]

Can you clarify the question a bit? Are you asking us to add a root, or for github/Gitlab/etc to add it?

[anoncam]

Can you clarify the question a bit? Are you asking us to add a root, or for github/Gitlab/etc to add it?

yeah this is not an ask of sigstore, it's a capability request of @github

[anoncam]

gitsign/README.md

Line 150 in e8d1ed2

1. The sigstore CA root is not a part of

@DODTeam1 - the roots from cyber.mil has this bundle, which would extend a great deal of signing support using existing PKI for a moderately sized vertical...interested if it is more desirable to have this user configurable, or baked in.

my ambiguity was grotesque, apologies