Hayden B
Hayden B
Prod release is out.
Oops, forgot to include the new provider config..
@segiddins Would you be OK with merging this now?
https://github.com/sigstore/sigstore-website/pull/328 for the CI fix
Good to rebase.
> So far, sigstore-go's releases have been source code only. With this workflow, sigstore-go will release binaries with attestation for these binaries. This might not be the way that users...
Closing this out, as provenance isn’t necessary for how Go pulls down modules.
I'm not well-versed in helm/argocd, but I think the lack of an explicit namespace could cause argocd to think there's constantly a diff. Can we add it for uniformity/just in...
I'm not sure the history behind it. I can't see why that wouldn't be safe, with including a default name.
For future infra work, I wonder how much of this we can reuse for the static-ct deployment. Off the top of my head, the primary differences would be the server...