search

sigstore / gitsign

Keyless Git signing using Sigstore
Other
914 stars 60 forks source link

Gitsign attest does not support private rekor instances #516

Closed aalsabag closed 1 month ago

aalsabag commented 1 month ago

Description

The new gitsign attest option does not seem to support private rekor instances. It attempts to use the default public instance. Here is the culprit:

// Upload to rekor
entry, err := a.rekorFn(ctx, rekorclient.Default, envelope, a.sv.Cert)

I'll start working on the fix Version 0.10.0