search

Vanilla-OS / Vib

Vib (Vanilla Image Builder) is a tool that allow generating Containerfile(s) using a Flatpak-like recipe and syntax.
http://vib.vanillaos.org/
GNU General Public License v3.0
54 stars 16 forks source link

Add support for signing images with cosign #33

Open axtloss opened 7 months ago

axtloss commented 7 months ago

View https://github.com/Vanilla-OS/ABRoot/issues/261 for more details

xynydev commented 7 months ago

This is something that needs to be done in CI / GitHub Actions after the container image is built from the Containerfile built by Vib.

kbdharun commented 7 months ago

This is something that needs to be done in CI / GitHub Actions after the container image is built from the Containerfile built by Vib.

Yep, the sigstore's cosign action should be run only after pushing the image to the respective registry.

axtloss commented 7 months ago

That doesn't mean it's something vib can't handle.

axtloss commented 3 months ago

With #76 being merged this only requires a finalize plugin