Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[BUG] verify-image attestation signature is not checked #2739

Closed
JimBugwadia opened this issue Nov 18, 2021 · 1 comment
Closed

[BUG] verify-image attestation signature is not checked #2739

JimBugwadia opened this issue Nov 18, 2021 · 1 comment
Assignees
@JimBugwadia
Labels
bug Something isn't working
Milestone
Kyverno Release 1...

Comments

@JimBugwadia
Copy link
Member

Software version numbers

  • Kubernetes version: n/a
  • Kubernetes platform (if applicable; ex., EKS, GKE, OpenShift): n/a
  • Kyverno version: 1.5.1

Describe the bug

When checking attestations, the OCI signature is not verified.

To Reproduce

Follow the example in the docs for attestations. Change the public key. The check is still successful.

Expected behavior

The check should fail if the key does not match.
@JimBugwadia JimBugwadia added the bug Something isn't working label Nov 18, 2021
@JimBugwadia JimBugwadia self-assigned this Nov 18, 2021
@JimBugwadia JimBugwadia added this to the Kyverno Release 1.5.2 milestone Nov 18, 2021
@JimBugwadia JimBugwadia mentioned this issue Nov 18, 2021
Merged
2 tasks
@realshuting
Copy link
Member

Closed via #2740.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@JimBugwadia JimBugwadia

Labels
bug Something isn't working
Projects
None yet
Milestone
Kyverno Release 1.5.2
Development

No branches or pull requests
2 participants
@JimBugwadia @realshuting