corpus.blog
41,554 blogs · 4,819,422 posts Claim your blog
Record · corpus.blog/posts/01a0b5ca-2149-71cb-97e0-2e36d2d499cb

Keyless Git commit signing with Gitsign and GitHub Actions

Chainguard Blog · published 20 June 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at chainguard.dev Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
13
Words captured
1,112

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://github.com/sigstore/gitsign
github.com
https://slsa.dev/spec/v0.1/requirements
slsa.dev
https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work
git-scm.com
https://github.com/git/git/pull/1041
github.com
https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect
docs.github.com
https://docs.sigstore.dev/rekor/overview/
docs.sigstore.dev
https://github.com/wlynch/gitsign-action/runs/6492508355
github.com
https://tools.ietf.org/html/rfc5652
tools.ietf.org
https://github.com/sigstore/fulcio/blob/8b0bc7772d793ae926b6358eacd39a18493afa7b/docs/oid-info.md
github.com
https://token.actions.githubusercontent.com/
token.actions.githubusercontent.com
https://github.com/chainguard-dev/actions/tree/main/setup-gitsign
github.com
https://github.com/chainguard-dev/actions/blob/1ae1965b54071bbe81f016ce7b2c2c7515ca9c96/digesta-bot/action.yml
github.com
https://docs.sigstore.dev/rekor/installation
docs.sigstore.dev
Elsewhere on chainguard.dev (3)