Nicolas Chaillan

generate-key-pair fails on Azure Key Vault

9

**Description** cosign generate-key-pair --kms "azurekms://URLHERE.vault.usgovcloudapi.net/cosignkey" Error: failed to get public key: public key: public key: GET https://URLHERE.vault.usgovcloudapi.net/keys/cosignkey/ -------------------------------------------------------------------------------- RESPONSE 404: 404 Not Found ERROR CODE: KeyNotFound -------------------------------------------------------------------------------- { "error": {...

cosign doesn't use the right endpoint for Azure Key Vault on Azure Government

2

**Description** When trying to sign using a keyvault and container registry on Azure Government, the cosign cli calls the wrong endpoint for token: It calls: https://login.microsoftonline.com/***/oauth2/token?api-version=1.0 Instead of: [https://login.microsoftonline.us/{tenant_id}/oauth2/token` You...

GHSA-hxwh-jpp2-84pm

2

Hello, Is there an ETA for fixing GHSA-hxwh-jpp2-84pm ? https://github.com/advisories/GHSA-hxwh-jpp2-84pm Thank you