containerd / runwasi

Facilitates running Wasm / WASI workloads managed by containerd
Apache License 2.0
1.01k stars 82 forks source link

feat(ci): add cosign to sign the released binaries #459

Closed Mossaka closed 5 months ago

Mossaka commented 5 months ago

This draft PR adds cosign signing for the released binaries. It is WIP.

I am testing releases in my own forked repo: https://github.com/Mossaka/runwasi/actions/runs/7634841458

Related to #417

Mossaka commented 5 months ago

Could we add a doc on how to run the verification after downloading the files?

Sure, I also intend to add the verification doc on the release page.

Mossaka commented 5 months ago

@jeremyrickard could you please take a look?