search

metal-stack / metal-api

API to manage and control plane resources like machines, switches, operating system images, machine sizes, networks, IP addresses and more
GNU Affero General Public License v3.0
132 stars 9 forks source link

consider container image signing #246

Open majst01 opened 2 years ago

majst01 commented 2 years ago

GH Actions gathered support for that: https://github.blog/2021-12-06-safeguard-container-signing-capability-actions/

majst01 commented 1 year ago

Here is a example PR which does keyless signing in GH Actions

https://github.com/opentffoundation/opentf/pull/265