search

open-telemetry / opentelemetry-dotnet-instrumentation

OpenTelemetry .NET Automatic Instrumentation
https://opentelemetry.io
Apache License 2.0
368 stars 91 forks source link

Sign artifacts #2821

Open pellared opened 1 year ago

pellared commented 1 year ago

Sign nupkg, dll, psm1 files and possibly other artifacts.

pellared commented 1 year ago

It may be good to look at https://github.com/open-telemetry/opentelemetry-collector-releases/pull/207

EDIT: It looks like sigstore does not meets our needs. See: https://github.com/sigstore/cosign/issues/2170 and https://github.com/sigstore/fulcio/issues/250

pellared commented 1 year ago

Related to https://github.com/open-telemetry/community/issues/1672.