Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Attestation/Blob signing and verification using a RFC3161 time-stamping server #2464

Merged
merged 11 commits into from
Nov 23, 2022
Merged

Attestation/Blob signing and verification using a RFC3161 time-stamping server #2464

merged 11 commits into from
Nov 23, 2022

Commits on Nov 22, 2022

  1. add support for tsa signing and verification of images 

    Signed-off-by: Hector Fernandez <hector@chainguard.dev>
    @hectorj2f
    hectorj2f committed Nov 22, 2022
    Configuration menu
    Copy the full SHA
    47be791 View commit details
    Browse the repository at this point in the history

  2. address reviewer comments 

    Signed-off-by: Hector Fernandez <hector@chainguard.dev>
    @hectorj2f
    hectorj2f committed Nov 22, 2022
    Configuration menu
    Copy the full SHA
    de64e54 View commit details
    Browse the repository at this point in the history

  3. add support for both tsa and rekor verifications 

    Signed-off-by: Hector Fernandez <hector@chainguard.dev>
    @hectorj2f
    hectorj2f committed Nov 22, 2022
    Configuration menu
    Copy the full SHA
    5ea599a View commit details
    Browse the repository at this point in the history

  4. signing and verification of blobs using time-stamping 

    Signed-off-by: Hector Fernandez <hector@chainguard.dev>
    @hectorj2f
    hectorj2f committed Nov 22, 2022
    Configuration menu
    Copy the full SHA
    c8b930b View commit details
    Browse the repository at this point in the history

  5. adjust code to latest changes 

    Signed-off-by: Hector Fernandez <hector@chainguard.dev>
    @hectorj2f
    hectorj2f committed Nov 22, 2022
    Configuration menu
    Copy the full SHA
    cbd56f5 View commit details
    Browse the repository at this point in the history

  6. add support for attestations 

    Signed-off-by: Hector Fernandez <hector@chainguard.dev>
    @hectorj2f
    hectorj2f committed Nov 22, 2022
    Configuration menu
    Copy the full SHA
    3367200 View commit details
    Browse the repository at this point in the history

  7. set right annotation 

    Signed-off-by: Hector Fernandez <hector@chainguard.dev>
    @hectorj2f
    hectorj2f committed Nov 22, 2022
    Configuration menu
    Copy the full SHA
    b969b8b View commit details
    Browse the repository at this point in the history

  8. add test for blob signing/verification 

    Signed-off-by: Hector Fernandez <hector@chainguard.dev>
    @hectorj2f
    hectorj2f committed Nov 22, 2022
    Configuration menu
    Copy the full SHA
    749f796 View commit details
    Browse the repository at this point in the history

  9. ensure b64 signature is time-stamped 

    Signed-off-by: Hector Fernandez <hector@chainguard.dev>
    @hectorj2f
    hectorj2f committed Nov 22, 2022
    Configuration menu
    Copy the full SHA
    3f6115b View commit details
    Browse the repository at this point in the history

  10. test: add attestation verify test 

    Signed-off-by: Hector Fernandez <hector@chainguard.dev>
    @hectorj2f
    hectorj2f committed Nov 22, 2022
    Configuration menu
    Copy the full SHA
    1a0f088 View commit details
    Browse the repository at this point in the history

  11. refactor functions and flags 

    Signed-off-by: Hector Fernandez <hector@chainguard.dev>
    @hectorj2f
    hectorj2f committed Nov 22, 2022
    Configuration menu
    Copy the full SHA
    954fd50 View commit details
    Browse the repository at this point in the history