ratify
ratify copied to clipboard
ratify-project
Artifact Ratification Framework
# Description ## What this PR does / why we need it: This PR migrates the Azure SPN used for AKS e2e tests to use federated identities via OIDC -...
# Description ## What this PR does / why we need it: Added some unit tests for KMP and CertStore to cover the basic reconcile logics. Check diff at: https://github.com/binbin-li/ratify/pull/148...
# Description ## What this PR does / why we need it: ## Which issue(s) this PR fixes *(optional, using `fixes #(, fixes #, ...)` format, will close the issue(s)...
### What would you like to be added? The current verifierReports did not include the digest for a signature manifest. If an image has multiple signatures, it will be very...
### What would you like to be added? The brief error message is too short, which is about 30 characters. It should be extended to more characters, for instance 150...
### What would you like to be added? I configured the cosign verifier with non-existing keymanagementprovider resource, the command `kubectl get verifier cosign-verifier` indicated a success. However, when I started...
### What happened in your environment? After installation of Ratify, I configured cosign verifier to verify images signed with Cosign and keys stored in AKV. However, the image deployment was...
### What happened in your environment? I specified a non-existing tenantID or clientID for accessing AKV, and then used the command `kubectl get keymanagementprovider` to check the status. The `ISSUCCESS`...
### What happened in your environment? I created a key in AKV and used the latest version (`version-1`) to sign container images. Later on, I found there were some issues...
### What would you like to be added? Current unit test cases are not fuzzed, Ratify could utilize go fuzzing to generate random data to help expose bugs and detect...