opentelemetry-dotnet-instrumentation icon indicating copy to clipboard operation
opentelemetry-dotnet-instrumentation copied to clipboard

Sign artifacts

Open pellared opened this issue 2 years ago • 2 comments

Sign nupkg, dll, psm1 files and possibly other artifacts.

pellared avatar Aug 09 '23 16:08 pellared

It may be good to look at https://github.com/open-telemetry/opentelemetry-collector-releases/pull/207

EDIT: It looks like sigstore does not meets our needs. See: https://github.com/sigstore/cosign/issues/2170 and https://github.com/sigstore/fulcio/issues/250

pellared avatar Aug 10 '23 12:08 pellared

Related to https://github.com/open-telemetry/community/issues/1672.

pellared avatar Sep 21 '23 12:09 pellared