Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support the .sigstore bundle extension #3771

Closed
edgarrmondragon opened this issue Jan 5, 2024 · 1 comment · Fixed by #3772
Closed

Support the .sigstore bundle extension #3771

edgarrmondragon opened this issue Jan 5, 2024 · 1 comment · Fixed by #3772
Labels
kind/enhancement New feature or request

Comments

@edgarrmondragon
Copy link
Contributor

Is your feature request related to a problem? Please describe.

The scorecard GH action is detecting that my last 5 releases don't have signed artifacts, though they do have .sigstore bundles.

Describe the solution you'd like

The .sigstore extension should flag a signed artifact.

Describe alternatives you've considered

Can't think of any 😅

Additional context
@edgarrmondragon edgarrmondragon added the kind/enhancement New feature or request label Jan 5, 2024
@edgarrmondragon edgarrmondragon mentioned this issue Jan 5, 2024
Merged
2 tasks
@laurentsimon
Copy link
Contributor

laurentsimon commented Jan 5, 2024 •
edited
Loading

Good catch. Done in #3773

@cpswan cpswan mentioned this issue Mar 4, 2024
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
kind/enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

✨ Support .sigstore bundles to check for signed releases edgarrmondragon/scorecard
2 participants
@edgarrmondragon @laurentsimon