search

sigstore / sigstore-blog

Codebase for blog.sigstore.dev
https://blog.sigstore.dev
Apache License 2.0
6 stars 14 forks source link

Add blog post for Cosign 2.0 released #24

Closed haydentherapper closed 1 year ago

haydentherapper commented 1 year ago

Summary

Release Note

Documentation

haydentherapper commented 1 year ago

/HOLD This should not be released until the 23rd or when we release Cosign 2.0.

haydentherapper commented 1 year ago

cc @bobcallaway @priyawadhwa for review

johnfosborneiii commented 1 year ago

Do you want to mention that anyone using --force/-f in cosign 1 needs to use --yes in cosign 2? I recognize that --yes was there in cosign 1 also, but in practice all the GitHub Actions I've seen were using --force which is gone. Any GitHub Action that looks like this is going to break with the transition: