search

argoproj / argo-cd

Declarative Continuous Deployment for Kubernetes
https://argo-cd.readthedocs.io
Apache License 2.0
17.87k stars 5.45k forks source link

Verify commits by SSH key #8733

Open shmargum opened 2 years ago

shmargum commented 2 years ago

Summary

Git 2.34 now supports signing commits with SSH keys instead of GPG It would be nice to verify commits by SSH key, like they are with GPG keys.

Motivation

Signing with ssh key is a simpler alternative to signing with a gpg key

relevant GitHub discussion: https://github.com/github/feedback/discussions/7744

Proposal

This can be implemented much the same way as GPG key checks are done.

hex-m commented 6 months ago

possible duplicate: https://github.com/argoproj/argo-cd/issues/16007

jannfis commented 6 months ago

This could be rather easily integrated after we implement https://github.com/argoproj/argo-cd/pull/14964