Skip to content

Signed container images (Sigstore/Cosign) for the Enterprise edition#632

Merged
jviotti merged 1 commit intomainfrom
cosign
Feb 13, 2026
Merged

Signed container images (Sigstore/Cosign) for the Enterprise edition#632
jviotti merged 1 commit intomainfrom
cosign

Conversation

@jviotti
Copy link
Member

@jviotti jviotti commented Feb 13, 2026

Signed-off-by: Juan Cruz Viotti jv@jviotti.com

@jviotti jviotti force-pushed the cosign branch 2 times, most recently from d902bdf to cd86d29 Compare February 13, 2026 19:25
@jviotti jviotti marked this pull request as ready for review February 13, 2026 19:27
@augmentcode
Copy link

augmentcode bot commented Feb 13, 2026

🤖 Augment PR Summary

Summary: Adds Sigstore Cosign-based signing and verification for the Enterprise container image in the deploy workflow.
Changes: Grants OIDC id-token permission and adds steps to install cosign, resolve the pushed image digest, sign the digest, and verify the resulting signature.

🤖 Was this summary useful? React with 👍 or 👎

Copy link

@augmentcode augmentcode bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review completed. 4 suggestions posted.

Fix All in Augment

Comment augment review to trigger a new review at any time.

Copy link

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 1 file

Signed-off-by: Juan Cruz Viotti <jv@jviotti.com>
@jviotti jviotti changed the title Signed Container Images for the Enterprise edition Signed container images (Sigstore/Cosign) for the Enterprise edition Feb 13, 2026
@jviotti jviotti merged commit 536ccfb into main Feb 13, 2026
5 checks passed
@jviotti jviotti deleted the cosign branch February 13, 2026 19:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant