-
Notifications
You must be signed in to change notification settings - Fork 558
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Use TUF from scaffolding for validating cosign. #2146
Conversation
Signed-off-by: Ville Aikas <[email protected]>
Signed-off-by: Ville Aikas <[email protected]>
Codecov Report
@@ Coverage Diff @@
## main #2146 +/- ##
=======================================
Coverage 26.23% 26.23%
=======================================
Files 130 130
Lines 7617 7617
=======================================
Hits 1998 1998
Misses 5362 5362
Partials 257 257 Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here. |
Hm, I don't see the verify-attestation test running, did it maybe get turned off during yesterdays breakage (I'm sorry about that :( ) |
Signed-off-by: Ville Aikas <[email protected]>
Signed-off-by: Ville Aikas <[email protected]>
Signed-off-by: Ville Aikas <[email protected]>
I just had screwed up the 4 lines of yaml (couple of times). |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm
Now that scaffolding supports TUF, add tests with it for cosign. Previously these were done with various env variables, now use cosign initialize to use the TUF root.
@asraa
Signed-off-by: Ville Aikas [email protected]
Summary
Release Note
Documentation