3 ms·
seems to be signing using ephemeral keys backed by open ID connect and transparency logs. I don't know when it's available yet, the article does not say.
by playcache 6y ago
seems to be signing using ephemeral keys backed by open ID connect and transparency logs. I don't know when it's available yet, the article does not say.
- dlor 6y agoDepends what you mean by available :) It's all basically up and running right now in a "sandbox" where we make no promises on integrity or availability but, we're encouraging people to try it out and give feedback. If you want to try it out to sign containers this branch has everything you need: https://github.com/sigstore/cosign/pull/53 https://github.com/sigstore/cosign/pull/53