Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support execution environment signing #45

Open
mayaCostantini opened this issue Jun 21, 2023 · 0 comments
Open

Support execution environment signing #45

mayaCostantini opened this issue Jun 21, 2023 · 0 comments

Comments

@mayaCostantini
Copy link

It could be convenient to be able to sign containers/execution environments from the command line using ansible-sign. The CLI would handle the signing part and interact with the automation hub container registry to store the signature and retrieve it from the image reference if necessary.

Different types of signatures could be generated, such as GPG and Sigstore/Cosign type signatures.
For Sigstore, the only barrier as of now is the lack of a Python client that supports container signing (this is not the case in sigstore-python currently), but we could try to implement this functionality. Some tools such as oras might be useful when it comes to interaction with an OCI registry, the rest of the signing logic being more straightforward and already handled by sigstore-python.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant