sigstore / k8s-manifest-sigstore

kubectl plugin for signing Kubernetes manifest YAML files with sigstore
Apache License 2.0
79 stars 21 forks source link

Generate SLSA Provenance on Release using SLSA Go Releaser #98

Closed joycebrum closed 2 years ago

joycebrum commented 2 years ago

Closes #97

Summary

This PR is related to the issue #97, and, to allow SLSA Provenance I've removed the .goreleaser.yml file and added the .slsa-goreleaser-darwin-amd64.yml, .slsa-goreleaser-linux-amd64.yml and .slsa-goreleaser-windows-amd64.yml.

Besides, I've added the .github/workflows/slsa-goreleaser.yml to generate the release and the provenance.

In case of doubts or concerns about the changes, please let me know.

Release Note

Release with Provenance

Documentation

It does not require any change in documentation