search

chainguard-dev / cosign-ecs-verify

Lambda function for verifying signed images in ECS
Apache License 2.0
33 stars 7 forks source link

Try to make generalizeable #5

Closed znewman01 closed 2 years ago

znewman01 commented 2 years ago

Towards #1

i.e. you can run it on someone else's account, not just the Chainguard one

Big obstacle is what to do about the images -- I don't think we want to make people follow two tutorials, so we should have a quick way to get up and running with some signed/unsigned images. There's some nuance there though (can't manage images in TF easily).

Still half-baked but let me know what you think

znewman01 commented 2 years ago

@strongjz ready for another pass