Closed rogerbinns closed 4 months ago
The PGP stuff is annoying, and cosign is the future. This works to sign:
cosign sign-blob --bundle dist/cosign.bundle dist/apsw-3.45.3.0.zip
This works to verify when I use github to auth:
cosign verify-blob apsw-3.45.3.0.zip --bundle cosign.bundle --certificate-identity=rogerb@rogerbinns.com --certificate-oidc-issuer=https://github.com/login/oauth
The PGP stuff is annoying, and cosign is the future. This works to sign:
This works to verify when I use github to auth: