ratify
ratify copied to clipboard
ratify-project
Artifact Ratification Framework
### What would you like to be added? We need to define the process for breaking changes including: - Ratify Core - Ratify Cli - Plugins - CRD ### Anything...
### What would you like to be added? As we deprecate license checker in up coming release, we need to document our plugin deprecation process ### Anything else you would...
### What happened in your environment? I installed Ratify on my AKS cluster before the appropriate access policy was assigned to the managed identity used by Ratify to connect to...
### What would you like to be added? Ratify should publish a document that outlines branching strategy, as wells as patches and support criteria. ### Anything else you would like...
### What would you like to be added? Cosign verifier is currently limited in its configurability and scenarios it supports. Work Items: - [x] #1294 - [ ] #1295 -...
### What would you like to be added? The documentation for "Ratify on AWS" mentions a few steps to get cosign signatures working with Ratify, but this isn't mentioned on...
Signed-off-by: Sajay Antony # Description ## What this PR does / why we need it: This add the contribution ladder template for the Ratify project and is based of https://github.com/cncf/project-template/blob/main/CONTRIBUTING.md...
We discussed and aligned in the community meeting that we are going to donate Ratify to a open-source foundation. CNCF would be a potential home for our donation. This issue...
### What would you like to be added? The internal types of store and verifier supports the version field. We should add them to the verifier property, this will be...
### What would you like to be added? Time-stamping (https://www.rfc-editor.org/rfc/rfc3161) extends the trust of signature beyond the validity period of a certificate. If a container image was signed before the...
