Skip to content

Expose Cosign Public Key

Pierrick Seite requested to merge cosign into main

This MR exposes the cosign public key expected to be used to verify the signature of the images. It avoids the verifier to access the public key via the CI/CD variables, so requiring an access token with high privileges. In other words, this MR makes the public key really public...

Edited by Thomas Morin

Merge request reports