corpus.blog
41,554 blogs · 4,654,352 posts Claim your blog
Record · corpus.blog/posts/01a0b5ca-2149-71cb-97e0-2e36e660acfb

Zero-friction “keyless signing” with Github Actions

Chainguard Blog · published 1 December 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at chainguard.dev Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
15
Words captured
759

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://github.blog/changelog/2021-10-27-github-actions-secure-cloud-deployments-with-openid-connect/
github.blog
https://docs.github.com/en/actions/security-guides/automatic-token-authentication
docs.github.com
https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect
docs.github.com
https://github.com/sigstore/cosign/blob/main/README.md
github.com
https://github.com/marketplace/actions/cosign-installer
github.com
https://github.com/sigstore/rekor
github.com
https://github.com/docker/build-push-action/issues/461
github.com
https://github.com/mattmoor/zero-friction-actions/blob/main/.github/workflows/docker-publish.yml
github.com
https://docs.github.com/en/actions/managing-workflow-runs/manually-running-a-workflow
docs.github.com
https://twitter.com/lorenc_dan/status/1462764694515687426
twitter.com
https://github.com/caarlos0-graveyard/gorel-keyless
github.com
https://shibumi.dev/posts/keyless-signatures-with-github-actions/
shibumi.dev
https://twitter.com/jacques_chester/status/1465030998287171588
twitter.com
https://discuss.python.org/t/pep-480-surviving-a-compromise-of-pypi-end-to-end-signing-of-packages/5666
discuss.python.org
https://github.com/sigstore/community
github.com
Elsewhere on chainguard.dev (2)