search

getporter / porter

Porter enables you to package your application artifact, client tools, configuration and deployment logic together as an installer that you can distribute, and install with a single command.
https://porter.sh
Apache License 2.0
1.23k stars 205 forks source link

Bundle is not signed when pushed from an archive #3201

Closed kichristensen closed 2 weeks ago

kichristensen commented 2 months ago

Describe the bug

When pushing a bundle from an archive the resulting bundle is not signed when the --sign-bundle flag is passed, and no warning or error is shown.

To Reproduce

Steps to reproduce the behavior:

  1. Run porter publish --sign-bundle --archive <ARCHIVE> --reference <REFERENCE>
  2. Looking in the repository the bundle and invocation image is not signed

Expected behavior

The bundle and invocation image should be signed