search

superorbital / cludo

Sudo for the Cloud.
Other
4 stars 1 forks source link

Sign release artifacts using sigstore #61

Closed tammersaleh closed 2 years ago

tammersaleh commented 2 years ago

Requires #60

spkane commented 2 years ago

done. We are using the keyless process that is documented here:

https://github.com/sigstore/cosign/blob/main/KEYLESS.md

Notes on how to verify these keys has been added to the standard github release notes (each release that we do).

Details can be seen in the ci.yaml under .github/workflows