Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update to targets #157

Closed
kommendorkapten opened this issue Aug 21, 2024 · 3 comments · Fixed by #156
Closed

Update to targets #157

kommendorkapten opened this issue Aug 21, 2024 · 3 comments · Fixed by #156
Labels
enhancement New feature or request

Comments

@kommendorkapten
Copy link
Member

Description

Remove the GitHub TSA as it's not used by anything. It's being removed from the production repo too, see sigstore/root-signing#1268

Add signing_config.json for client configuration. This file will contain URLs for the OIDC provider, Fulcio CA and Rekor transparency log which can be used by a client to bootstrap itself. This was added to sigstore protobuf spec in sigstore/protobuf-specs#277

@haydentherapper
Copy link
Contributor

We'll want to update signing_config again once with sigstore/protobuf-specs#383

@kommendorkapten
Copy link
Member Author

Fixed: #166

@kommendorkapten
Copy link
Member Author

Btw i added this to trtool

 $ ./trtool sc-init -ca https://fulcio.sigstage.dev -op https://oauth2.sigstage.dev/auth/ -tlog https://rekor.sigstage.dev | jq
{
  "mediaType": "application/vnd.dev.sigstore.signingconfig.v0.1+json",
  "caUrl": "https://fulcio.sigstage.dev",
  "oidcUrl": "https://oauth2.sigstage.dev/auth/",
  "tlogUrls": [
    "https://rekor.sigstage.dev"
  ]
}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants