gitsign
gitsign copied to clipboard
sigstore
Idea: KMS support
Description
If the user.signingKey git config option is set, this value will be set as an argument to gitsign:
| user.signingKey Value | gitsign args |
|---|---|
gitsign --status-fd=2 -bsau Billy Lynch <[email protected]> |
|
| asdf | gitsign --status-fd=2 -bsau asdf |
We could use this to emulate the cosign --key flag and support KMS keys!
This could also support local keys, but IMO this is a less compelling use case since smimesign should be able to handle this already unless all you want is the local key to be uploaded to Rekor.
