cosign icon indicating copy to clipboard operation
cosign copied to clipboard

Published 20 hours ago • verified publisher icon sigstore

Support for custom Annotations is missing

Open asraa opened this issue 3 years ago • 4 comments

Description

It seems like verify-attestation allows you to check for annotation key pairs, but does not recognize the flag. It also is not "verified" content FWIW. Also, attest does not expose an annotation map option either, but also labels it in the help string.

@wlynch also a good starter issue maybe?

asraa avatar Apr 18 '22 20:04 asraa

may I do that @asraa ?

developer-guy avatar May 09 '22 15:05 developer-guy

kindly ping 🙋🏻‍♂️

developer-guy avatar May 19 '22 10:05 developer-guy

Go for it!

dlorenc avatar May 19 '22 12:05 dlorenc

Ah sure! Sorry I was OOO until I got the ping :)

asraa avatar May 19 '22 13:05 asraa