sigstore / cosign

Code signing and transparency for containers and binaries
Apache License 2.0
4.37k stars 531 forks source link

Add native Linux package manager support for releases #1337

Closed strongjz closed 2 years ago

strongjz commented 2 years ago

Description

Add native packages for installs of cosign, etc. On build systems like AWS CodeBuild and others, instead of having users install Golang then cosign or curl releases from GitHub it would be helpful to install packages native package managers.

Example: https://netdevops.me/2021/building-and-publishing-deb/rpm-packages-with-goreleaser-and-gemfury/

Goreleaser supports this functionality and even uses it to release packages of goreleaser

dlorenc commented 2 years ago

Nice! Feel free to grab this one @strongjz!