-
Notifications
You must be signed in to change notification settings - Fork 547
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
add clean sub-command for deleting signature metadata from a given image #324
Conversation
This is awesome! It looks like you're missing some license boilerplate, and I had one nit on the help text as a suggestion. A test similar to this one would be awesome too: https://github.com/sigstore/cosign/blob/main/test/e2e_test.go#L63 You can sign an image, make sure it verifies, then clean, then make sure it doesn't verify. Let me know if that makes sense! |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Awesome! One suggestion on help text :)
cmd/cosign/cli/clean.go
Outdated
return &ffcli.Command{ | ||
Name: "clean", | ||
ShortUsage: "cosign clean <image uri>", | ||
ShortHelp: "Clean the sign metadata from an image", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
ShortHelp: "Clean the sign metadata from an image", | |
ShortHelp: "Remove all signatures from an image", |
Maybe this is more clear?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
yeah, sure 👍
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Thanks @developer-guy ! |
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: Batuhan Apaydın batuhan.apaydin@trendyol.com