Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sign packages #18

Open
didierofrivia opened this issue Dec 18, 2024 · 0 comments
Open

Sign packages #18

didierofrivia opened this issue Dec 18, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@didierofrivia
Copy link
Member

didierofrivia commented Dec 18, 2024

Is your feature request related to a problem? Please describe.
Currently our chart packages are not signed. Which means we can't guarantee the integrity of those to the users.

Describe the solution you'd like
Signing every package when it's created at their original repositories (authorino-operator, limitador-operator, dns-operator and kuadrant-operator) thus we not only will be guarantee the package integrity but also gaining the Signed badge at ArtifactsHub.io.

Notes
Here's a guide:
https://blog.devops.dev/a-guide-to-signing-helm-charts-with-gpg-using-github-action-and-sign-images-on-artifacthub-958a23010e94

@didierofrivia didierofrivia added the enhancement New feature or request label Dec 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Status: No status
Development

No branches or pull requests

1 participant