Skip to content

Add VEX attestation#2546

Open
himax1991 wants to merge 5 commits into
mainfrom
vex-attestations
Open

Add VEX attestation#2546
himax1991 wants to merge 5 commits into
mainfrom
vex-attestations

Conversation

@himax1991

Copy link
Copy Markdown
Contributor

Summary

  • Add .werf/defines/vex.tmpl for cosign OpenVEX attestations
  • Add base/vex image for VEX signing infrastructure
  • Extend werf-giterminism.yaml with signing mode env vars and registry/Vault secrets for CSE compatibility
  • Update CI build workflows for VEX registry credentials (modules-actions v15 / modules-gitlab-ci v13.0)

Enable cosign OpenVEX signing via base/vex image, giterminism secrets for registry and Vault, and CI build credentials.

Signed-off-by: Maksim Khimchenko <maksim.khimchenko@flant.com>
Signed-off-by: Maksim Khimchenko <maksim.khimchenko@flant.com>
Signed-off-by: Maksim Khimchenko <maksim.khimchenko@flant.com>
Signed-off-by: Maksim Khimchenko <maksim.khimchenko@flant.com>
Signed-off-by: Maksim Khimchenko <maksim.khimchenko@flant.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant