CrazyMax
|
7397cfe37c
|
sigstore: add function to verify image attestations
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
|
2026-01-13 13:21:55 +01:00 |
|
CrazyMax
|
d018ed13d0
|
sigstore: remove verbose flag from persisted cosign args
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
|
2025-11-12 14:44:23 +01:00 |
|
CrazyMax
|
85dfc7a573
|
sigstore: remove @actions/attest dependency
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
|
2025-11-05 11:11:57 +01:00 |
|
CrazyMax
|
6bd8db31fe
|
sigstore: multi image names support for signing
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
|
2025-11-04 13:36:03 +01:00 |
|
CrazyMax
|
5d9b7822a6
|
sigstore: sign and verify BuildKit attestation manifests
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
|
2025-11-03 09:35:07 +01:00 |
|
CrazyMax
|
364d8e8cda
|
sigstore: verifySignedArtifacts func
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
|
2025-10-30 15:52:34 +01:00 |
|
CrazyMax
|
1c0dc52a0e
|
sigstore: always set TSA server endpoint to provide trusted timestamping
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
|
2025-10-30 15:52:34 +01:00 |
|
CrazyMax
|
36cc95143c
|
sigstore class to sign buildkit provenance blobs
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
|
2025-10-30 15:52:33 +01:00 |
|