Example of GitHub Actions, goreleaser and cosign to release a Go based CLI program.
-
Updated
Jun 16, 2024 - Go
Example of GitHub Actions, goreleaser and cosign to release a Go based CLI program.
(landing area for upstream contributions and carried patches)
Demo to showcase how to build a golang application using ko. Sign and push the image to the container registry using https://sigstore.dev. Apply policy controller on Kubernetes to allow only signed images.
Kubernetes admission webhook that uses cosign tools Container Sign Verify
My collection of the Daggerverse
A demonstration of how GoReleaser can help us to make software supply chain more secure by using bunch of tools such as cosign, syft, grype, slsa-provenance
Sample Go application project with supply chain security workflows conforms to the SLSA Build Level 3 specification
Kubernetes Validation Admission Controller to verify Cosign signatures
Docker Registry Authentication Made Simple
Sign your artifacts, source code or container images using Sigstore tools, Save the Signatures you want to use, and Validate & Control the deployments to allow only the known Sources based on Signatures, Maintainers & other payloads automatically.
Stream, Mutate and Sign Images with AWS Lambda and ECR
Remove all the resources from an AWS account
Example goreleaser + github actions config with keyless signing and SBOM generation
This is just a proof-of-concept project that aims to sign and verify container images using cosign and OPA (Open Policy Agent)
Integrates Spiffe and Vault to have secretless authentication
Add a description, image, and links to the cosign topic page so that developers can more easily learn about it.
To associate your repository with the cosign topic, visit your repo's landing page and select "manage topics."