sigstore / cosign-gatekeeper-provider

🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their signatures
Apache License 2.0
76 stars 23 forks source link

Cache KMS and registry credentials #11

Open simongottschlag opened 2 years ago

simongottschlag commented 2 years ago

Description

Right now, if I'm not mistaken, new credentials will be configured for each time we reach out to the KMS or registry.

To make sure that we don't get rate limited, these credentials should be cached.