sigstore / sigstore-maven-plugin

sigstore maven plugin
https://sigstore.github.io/sigstore-maven-plugin/
Other
18 stars 11 forks source link

implement OAuth device code flow #30

Closed loosebazooka closed 1 year ago

loosebazooka commented 3 years ago

Allow headless users (ex: in CI) to use fulcio signing

sormuras commented 2 years ago

This "device code flow" implementation is needed in order to support something similar to https://blog.chainguard.dev/zero-friction-keyless-signing-with-github-actions/ - right?

hboutemy commented 1 year ago

done in sigstore-java, now used by the plugin