Basic signing for Hydra artifacts #15
Labels
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: the-distro/infra#15
Loading…
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Currently Hydra does not sign anything, we should fix this. I think for now we can get away with a signing key managed by agenix and with no people that can decrypt it. Later I know we'd like to have something HSM-backed etc., but that's something that will need significant R&D work, so... later.
Took care of this in
f74d1ca0f6
.