[1.8] Add sigstore sign functionalities - Githubissues

cnrancher / hangar

Multi-platform container image command-line utility.

https://hangar.cnrancher.com

Apache License 2.0

12 stars 6 forks source link

[1.8] Add sigstore sign functionalities #37

Closed STARRY-S closed 4 months ago

STARRY-S commented 4 months ago

Issue

https://github.com/cnrancher/hangar/issues/35

Describe

Add sigstore sign functionalities.

Additional changes:

Add generate-sigstore-key command to generate sigstore key-pair.
Add sign, sign validate commands to sign images & validate the signed images.
Add --sigstore-private-key, --sigstore-passphrase options for mirror & load commands.
Add --remove-signature option for mirror command to do-not-copy the image signature if source image is signed.

Testing

Manual Test

All changes have been manually tested.

Validation Test

Sigstore sign validation test functions were added and self-verified.