Open slaughtr opened 3 months ago
You can follow this link to submit it: Submit new Provider Signing Key
If you don't have access to the public key anymore, it can be extracted from the terraform registry:
To retrieve the public key from the Terraform registry, run:
curl 'https://registry.terraform.io/v1/providers/datadog/datadog/3.46.0/download/linux/amd64' | jq --raw-output '.signing_keys | .gpg_public_keys | .[0] |
.ascii_armor'
Public key contents below for reference:
-----BEGIN PGP PUBLIC KEY BLOCK-----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=6Bb7
-----END PGP PUBLIC KEY BLOCK-----
What resources or data sources are affected?
This applies to the provider as a whole.
Feature Request
Please consider submitting a signing key to the OpenTofu registry. I'm calling this out as it's something I've run into, and per the newest OpenTofu release notes this is an easy thing to do that would ensure security for many users of the provider.
References
No response