Skip to content

Remove EXPERIMENTAL flag for keyless signing #165

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

JeroenKnoops
Copy link
Member

@JeroenKnoops JeroenKnoops commented Nov 18, 2022

EXPERIMENTAL flag is not necessary anymore in Cosign v2.0.0

See also: https://blog.sigstore.dev/cosign-2-0-released/

Current support:

  • private signing (with public tlog) only with cosign Public and Private key.
  • public signing (with public tlog) only in keyless mode.

Support for keyless signing with private Rekor / Fulcio is not supported yet.

@JeroenKnoops JeroenKnoops added dependencies Pull requests that update a dependency file signing labels Nov 18, 2022
@JeroenKnoops
Copy link
Member Author

This is related to #186

EXPERIMENTAL flag is not necessary anymore in Cosign v0.14.0

See also: sigstore/cosign#2457

Signed-off-by: Jeroen Knoops <[email protected]>
@JeroenKnoops JeroenKnoops force-pushed the keyless-is-not-experimental branch from 8747dcc to 886c565 Compare March 7, 2023 09:37
…re to use keyless signing with PUBLIC tlog

Signed-off-by: Jeroen Knoops <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file signing
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant