search

sigstore / sigstore-java

java clients for sigstore
Apache License 2.0
39 stars 21 forks source link

Cosign with Keys #655

Open oallauddin opened 7 months ago

oallauddin commented 7 months ago

Question Are there any plans to support signing with key pairs? https://docs.sigstore.dev/key_management/signing_with_self-managed_keys/ https://edu.chainguard.dev/open-source/sigstore/cosign/an-introduction-to-cosign/#cosign-with-keys

loosebazooka commented 7 months ago

That's not really high on our priority list. You could write a signer using the API directly if you like just sign and then use the rekor client to upload to the transparency log? Which is what cosign provides.