Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Skips the signing of artifacts when valid configuration is not done #1003

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Skips the signing of artifacts when valid configuration is not done #1003

wants to merge 1 commit into from

Commits on Nov 30, 2023

  1. Skips the signing of artifacts when valid configuration is not done 

    Before this patch, if proper configurations where not done, chains
used to sign the tekton resources with the default configurations
which in turn used to create a impression that tekton resources are
signed as it used to add the `chains.tekton.dev/signed=true` annotation

Hence, with this patch, if proper configuration is not done (like for
e.g. private keys are not stored using cosign or x509) then in that case
tekton resources will be skipped from signing, indicating the user to
do proper configurations to sign the resources

Signed-off-by: PuneetPunamiya <ppunamiy@redhat.com>
    @PuneetPunamiya
    PuneetPunamiya committed Nov 30, 2023
    Configuration menu
    Copy the full SHA
    5a44771 View commit details
    Browse the repository at this point in the history