chainguard-dev / apko

Build OCI images from APK packages directly without Dockerfile
https://apko.dev
Apache License 2.0
1.13k stars 107 forks source link

Sigstore integration #11

Open kaniini opened 2 years ago

kaniini commented 2 years ago

Now that we have basic OCI image building and publishing, it's time to integrate signing.

amouat commented 1 year ago

Is this blocked on sigstore API stuff? Is there an issue we can reference?