Add support for keyless signatures for cosign

sse-secure-systems / connaisseur

An admission controller that integrates Container Image Signature Verification into a Kubernetes cluster

https://sse-secure-systems.github.io/connaisseur/

Apache License 2.0

436 stars 61 forks source link

Add support for keyless signatures for cosign #141

Closed xopham closed 1 month ago

xopham commented 3 years ago

Describe the feature Cosign offers yet another even more experimental feature: keyless signatures via OIDC. Connaisseur should attempt to support this based on Fulcio code signing certificates.

Optional: Implementation ideas Not sure.

phbelitz commented 1 month ago

duplicate of #1493