Skip to content

adds examples of signing with other tools#123

Merged
ltagliaferri merged 1 commit intosigstore:mainfrom
ChrisJBurns:adds-other-examples-in-signing-docs
Apr 12, 2023
Merged

adds examples of signing with other tools#123
ltagliaferri merged 1 commit intosigstore:mainfrom
ChrisJBurns:adds-other-examples-in-signing-docs

Conversation

@ChrisJBurns
Copy link
Contributor

This aims to deprecate https://github.com/sigstore/cosign/blob/main/EXAMPLES.md

Signed-off-by: ChrisJBurns 29541485+ChrisJBurns@users.noreply.github.com

@netlify
Copy link

netlify bot commented Apr 10, 2023

Deploy Preview for docssigstore ready!

Name Link
🔨 Latest commit d1f879d
🔍 Latest deploy log https://app.netlify.com/sites/docssigstore/deploys/6435cdd716cd59000705876f
😎 Deploy Preview https://deploy-preview-123--docssigstore.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site settings.

Copy link
Contributor

@Hayden-IO Hayden-IO left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sections on GCP KMS and AWS KMS LGTM, we can omit the section on openssl since it's already covered

Copy link
Contributor

@ltagliaferri ltagliaferri left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for this! I just have a few little copyedits

Sign the payload with `gcloud kms`:

```shell
$ gcloud kms asymmetric-sign --digest-algorithm=sha256 --input-file=payload.json --signature-file=gcpkms.sig --key=foo --keyring=foo --version=1 --location=us-central
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you break this onto more than one line so it's easier for the reader (that is, so that they don't need to scroll horizontally)

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yep, just pushed up the change

Base64 encode the signature and upload with `cosign`:

```shell
cat gcpkms.sig | base64 | cosign attach signature --payload payload.json --signature - us-central1-docker.pkg.dev/dlorenc-vmtest2/test/taskrun
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would break this onto two lines too, and be more generic, like:

us-central1-docker.pkg.dev/user/test/taskrun

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yep, just pushed up the change. i noticed some others too which I've changed to be generic

Signed-off-by: ChrisJBurns <29541485+ChrisJBurns@users.noreply.github.com>
@ChrisJBurns ChrisJBurns force-pushed the adds-other-examples-in-signing-docs branch from a33d05d to d1f879d Compare April 11, 2023 21:15
Copy link
Contributor

@ltagliaferri ltagliaferri left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you!

@ltagliaferri ltagliaferri merged commit 95e968a into sigstore:main Apr 12, 2023
@ChrisJBurns ChrisJBurns deleted the adds-other-examples-in-signing-docs branch April 12, 2023 20:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants