getporter / porter

Porter enables you to package your application artifact, client tools, configuration and deployment logic together as an installer that you can distribute, and install with a single command.
https://porter.sh
Apache License 2.0
1.23k stars 205 forks source link

Copying bundles doesn't support signing #3203

Closed kichristensen closed 2 weeks ago

kichristensen commented 2 months ago

Describe the bug

When copying a bundle between repositories, it is not possible to have the destionation bundle signed.

To Reproduce

Steps to reproduce the behavior:

  1. Run porter copy --source <SOURCE> --destination <DEST> where <SOURCE> is a signed bundle
  2. See that the destination bundle is not signed, even if the source bundle is signed

Expected behavior

The destination bundle is signed, or it is possible to create a new signature for the destination bundle