Add support for ambient credentials detection in jenkins workflow

sigstore / sigstore-java

java clients for sigstore

Apache License 2.0

37 stars 20 forks source link

Open KiranSatyaRaj opened 3 weeks ago

KiranSatyaRaj commented 3 weeks ago

Currently, the default way of signing artifacts is via WebAuthFlow

The other way is through ambient credentials detection i.e using predefined oidc token in workflow environment for signing.
The second method is only supported in Github Actions Workflow
I propose to add support for second method in jenkins workflow as well

KiranSatyaRaj commented 3 weeks ago

(gentle ping) @loosebazooka