Files
podinfo/.cosign
Stefan Prodan 0771a597e6 Use tonistiigi/xx for multi-arch builds
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2021-10-21 17:35:43 +03:00
..

Podinfo signed releases

Podinfo deployment manifests are published to GitHub Container Registry as OCI artifacts and are signed using cosign.

Verify the artifacts with cosign

Install the cosign CLI:

brew install sigstore/tap/cosign

Verify a podinfo release with cosign CLI:

cosign verify -key https://raw.githubusercontent.com/stefanprodan/podinfo/master/cosign/cosign.pub \
ghcr.io/stefanprodan/podinfo-deploy:latest

Download the artifacts with crane

Install the crane CLI:

brew install crane

Download the podinfo deployment manifests with crane CLI:

$ crane export ghcr.io/stefanprodan/podinfo-deploy:latest -| tar -xf - 

$ ls -1
deployment.yaml
hpa.yaml
kustomization.yaml
service.yaml