Open VenutNSA opened 5 months ago
Description
Hey, everyone!
I have a need for static key storage without using transit encryption. Is there any method to force cosign to use the signing key just from the KV storage?
cosign sign --tlog-upload=false --key hashivault://$KEY $IMAGE
I don't think this is possible or will be supported/implemented in the future. But you can do the following :
Description
Hey, everyone!
I have a need for static key storage without using transit encryption. Is there any method to force cosign to use the signing key just from the KV storage?
cosign sign --tlog-upload=false --key hashivault://$KEY $IMAGE