Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

adds examples of signing with other tools #123

Merged

Conversation

ChrisJBurns
Copy link
Contributor

This aims to deprecate https://github.com/sigstore/cosign/blob/main/EXAMPLES.md

Signed-off-by: ChrisJBurns [email protected]

@netlify
Copy link

netlify bot commented Apr 10, 2023

Deploy Preview for docssigstore ready!

Name Link
🔨 Latest commit d1f879d
🔍 Latest deploy log https://app.netlify.com/sites/docssigstore/deploys/6435cdd716cd59000705876f
😎 Deploy Preview https://deploy-preview-123--docssigstore.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site settings.

Copy link
Contributor

@haydentherapper haydentherapper left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sections on GCP KMS and AWS KMS LGTM, we can omit the section on openssl since it's already covered

content/en/cosign/sign.md Outdated Show resolved Hide resolved
Copy link
Collaborator

@ltagliaferri ltagliaferri left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for this! I just have a few little copyedits

content/en/cosign/sign.md Outdated Show resolved Hide resolved
Sign the payload with `gcloud kms`:

```shell
$ gcloud kms asymmetric-sign --digest-algorithm=sha256 --input-file=payload.json --signature-file=gcpkms.sig --key=foo --keyring=foo --version=1 --location=us-central
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you break this onto more than one line so it's easier for the reader (that is, so that they don't need to scroll horizontally)

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yep, just pushed up the change

Base64 encode the signature and upload with `cosign`:

```shell
cat gcpkms.sig | base64 | cosign attach signature --payload payload.json --signature - us-central1-docker.pkg.dev/dlorenc-vmtest2/test/taskrun
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would break this onto two lines too, and be more generic, like:

us-central1-docker.pkg.dev/user/test/taskrun

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yep, just pushed up the change. i noticed some others too which I've changed to be generic

content/en/cosign/sign.md Outdated Show resolved Hide resolved
@ChrisJBurns ChrisJBurns force-pushed the adds-other-examples-in-signing-docs branch from a33d05d to d1f879d Compare April 11, 2023 21:15
Copy link
Collaborator

@ltagliaferri ltagliaferri left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you!

@ltagliaferri ltagliaferri merged commit 95e968a into sigstore:main Apr 12, 2023
@ChrisJBurns ChrisJBurns deleted the adds-other-examples-in-signing-docs branch April 12, 2023 20:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants