Skip to content

Sign artifacts #175

@slashpai

Description

@slashpai

Chart

perses, perses-operator

Proposal

Currently artifact hub shows both charts as not signed. We need to sign the charts during release

Ref: https://helm.sh/docs/topics/provenance/

For OCI artifacts could use cosign for keyless signing with Sigstore

Ref: https://github.com/sigstore/cosign-installer

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels
    No fields configured for Feature.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions