Release v1.1.0!

[dlorenc]

@dekkagaijin @developer-guy @Dentrax anything else we want to get in for this?

[dlorenc]

@JimBugwadia just fixed #543 which is pretty important to get out soon IMO. We've also seen quite a few new features, so maybe target end of this week?

Some nice to haves (don't have to wait for):

• Lightweight verification library/module #532
• Handling passwords when stdin is a pipe (as opposed to a TTY) #525
• Integrate sigstore's root of trust into cosign #389 (we've made some progress here, but can keep going!)

[developer-guy]

I have also some nice to have ones, wdyt?

• cosign does not support all available HashiCorp Vault algorithms #538 (this one is related to bug about Vault KMS)
• Feature: Add support for custom attestation predicate types but this time while verifying attestation #512 (@Dentrax we will take care of that)

[Dentrax]

We have included #442 into 1.1.0 milestone. But I'm not sure about if we'd make it in time. (since still we're discussing the spec) Maybe we should iterate this to next milestone?

• Determine attestation format for vuln scans #442

[dlorenc]

Ooooh right! That one would be great too.

[dlorenc]

Hey! Checking in quick, need any help on these? I'll grab #525 today.

[cpanato]

sgtm!

[xopham]

#556 would be nice to have, too 🙂

[cpanato]

we should move this to 1.2.0 release and close this one