Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Cosign / Sigstore integration with OCI-SIF in SingularityCE #3436

Open
dtrudg opened this issue Dec 19, 2024 · 0 comments
Open

Cosign / Sigstore integration with OCI-SIF in SingularityCE #3436

dtrudg opened this issue Dec 19, 2024 · 0 comments
Assignees
@dtrudg
Labels
enhancement New feature or request
Milestone
SingularityCE 4.3.0

Comments

@dtrudg
Copy link
Member

dtrudg commented Dec 19, 2024 •
edited
Loading

When an OCI image is pulled into an OCI-SIF it should be possible to bring along any cosign signatures / attestations for the image that are present in the remote registry.

When an OCI-SIF is pushed to a remote registy, and cosign signatures / attestations in the OCI-SIF should be pushed up to the remote registry.

The singularity verify command should allow cosign signature verification against an OCI-SIF or image in a remote registry.
@dtrudg dtrudg added this to the SingularityCE 4.3.0 milestone Dec 19, 2024
@dtrudg dtrudg self-assigned this Dec 19, 2024
@dtrudg dtrudg added the enhancement New feature or request label Dec 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@dtrudg dtrudg

Labels
enhancement New feature or request
Projects
None yet
Milestone
SingularityCE 4.3.0
Development

No branches or pull requests
1 participant
@dtrudg