From 84bcb2e3016a34b36cb4504c83cb9e935b6ceb48 Mon Sep 17 00:00:00 2001 From: Jose Donizetti Date: Thu, 29 Jun 2023 17:05:44 -0300 Subject: [PATCH] doc: add tutorial to verify tracee signature --- docs/tutorials/verify-tracee-signature.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 docs/tutorials/verify-tracee-signature.md diff --git a/docs/tutorials/verify-tracee-signature.md b/docs/tutorials/verify-tracee-signature.md new file mode 100644 index 000000000000..72b65644228a --- /dev/null +++ b/docs/tutorials/verify-tracee-signature.md @@ -0,0 +1,16 @@ +# Cosign: verify tracee signature + + +## Prerequisites + +Before you begin, ensure that you have the following: + +- [cosign](https://docs.sigstore.dev/cosign/installation/) + +## Verify tracee signature + +Tracee images are signed with cosign keyless. To verify the signature we can run the command: + +```console +cosign verify aquasec/tracee:{{ git.tag } --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity-regexp https://github.com/aquasecurity/tracee | jq +```