examples: This adds example code on how to fetch a fulcio certificate

[Foxboron]

Summary

The API isn't super clearly documented and the workflow how to fetch certificates is not well explained. There are no simple code examples nor examples around that makes fulcio easy to pick up. This is a start at providing examples for how to utilize fulcio and something we should look at adopting for the other sigstore projects as well.

Signed-off-by: Morten Linderud morten@linderud.pw

[dlorenc]

This is really cool! Do you think we could toss a small readme next to it explaining the overall usage?

[Foxboron]

We could have a README in the examples directory that would explain each code snippet in the directory?

[cpanato]

We could have a README in the examples directory that would explain each code snippet in the directory?

that is perfect!

[lukehinds]

Good idea, I think with a README.md alongside the code works well too.

[Foxboron]

After a little discussion on slack last week I was contemplating just moving this pull-request to the https://github.com/sigstore/examples project. It seems fairly unmaintained at the moment and we could probably have project monitors along with code examples for utilizing sigstore/fulcio/rekor there.

If that requires a bit more planning I'll just finish up this PR and get it ready for a merge.

[bobcallaway]

After a little discussion on slack last week I was contemplating just moving this pull-request to the https://github.com/sigstore/examples project. It seems fairly unmaintained at the moment and we could probably have project monitors along with code examples for utilizing sigstore/fulcio/rekor there.

If that requires a bit more planning I'll just finish up this PR and get it ready for a merge.

I'd vote to merge this here and then move later if desired.

[lukehinds]

echo what bob says, I think we should remove sigstore/examples to be honest. for me it makes sense to have relevant examples under each respective project.

[Foxboron]

Sorry for the delay!

Added the license header and wrote a README. If it's a bit on the spare side we can iterate on it now or expand on it later when we get more examples.

[lukehinds]

lgtm now, just CI has a dep breakage, a quick rebase might resolve that.

[Foxboron]

Any reason this was never merged?

[dlorenc]

Any reason this was never merged?

The build looks broken: https://github.com/sigstore/fulcio/runs/5066358179?check_suite_focus=true

It might just need a rebase and go mod tidy

[Foxboron]

Weird!

Rebased and updated the example to account for the new redirect variable that was added.

[codecov-commenter]

Codecov Report

Merging #324 (b6dcb36) into main (8fca631) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main     #324   +/-   ##
=======================================
  Coverage   43.57%   43.57%           
=======================================
  Files          18       18           
  Lines        1221     1221           
=======================================
  Hits          532      532           
  Misses        615      615           
  Partials       74       74           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 8fca631...b6dcb36. Read the comment docs.

[bobcallaway]

I think we've deprecated the v1 endpoint so would be good to remove that but otherwise LGTM

[Foxboron]

Patched, rebased and pushed :)