crashappsec / chalk

Chalk allows you to follow code from development, through builds and into production.
https://crashoverride.com/
GNU General Public License v3.0
322 stars 11 forks source link

fix(cosign): push attestation to each registry #284

Closed miki725 closed 1 month ago

miki725 commented 2 months ago

Issue

extension of https://github.com/crashappsec/chalk/pull/282

Description

see commit messages

Testing

push to multiple registries at once. something like:

➜ make; and ./chalk setup; and ./chalk --trace docker build -f (echo FROM alpine | psub) .  -t 10.10.20.30:5044/test -t 10.10.20.30:5044/test:chalk -t 10.10.20.30:5044/foo:one -t 10.10.20.30:5044/foo:two --push --no-cache