Christoph Hamsen

**Describe the bug** I am running an android smartphone using Genymotion, pushing and starting the frida server and then connecting via objection (installed in virtualenv) using `objection --gadget org.myorg.myapp explore`....

feat: cosign keyless support

2

Fixes #141 ## Description - adds support for cosign keyless signatures via OIDC :warning: WIP Notes: - integration test should be added - requires specification of rekor root cert and...

make detectionMode configurable per namespace

1

### Discussed in https://github.com/sse-secure-systems/connaisseur/discussions/691 Originally posted by **albertovmware** June 17, 2022 I think that it could be good to block unsigned images in a specific namespace and use detection mode...

refactor cosign error handling

1

**Describe the feature** cosign error parsing has been growing over time and should be handled in a dedicated function with proper testing: https://github.com/sse-secure-systems/connaisseur/blob/master/connaisseur/validators/cosign/cosign_validator.py#L123

Kubernetes Sigstore support as of v1.24

1

**Describe the feature** Kubernetes introduced [Sigstore support as of v1.24](https://blog.sigstore.dev/kubernetes-signals-massive-adoption-of-sigstore-for-protecting-open-source-ecosystem-73a6757da73). It should be considered how that can be used within Connaisseur, e.g. validating k8s signatures, and what additional consequences derive.

Add public signature data for connaisseur itself to github repo

2

**Describe the feature** The public signature information for connaisseur itself should be added to the github repository for Notary v1 and also Cosign **Optional: Is your feature request related to...

Improve Integration tests to check whether returned digests are actually valid

2

**Describe the bug** In the integration tests, it is checked whether 'pod created'. However, this will even appear, if the digest is wrong and the image cannot be pulled. **Expected...

**Describe the feature** GitHub offers the [GitHub Container Registry](https://docs.github.com/en/packages/working-with-a-github-packages-registry/working-with-the-container-registry) (ghcr) for container images (private and public). This can be used within the CI to store images. **Optional: Is your feature...

ci: use ghcr for ci

1

Fixes # ## Description ## Checklist - [ ] PR is rebased to/aimed at branch `develop` - [ ] PR follows [Contributing Guide](https://github.com/sse-secure-systems/connaisseur/blob/master/docs/CONTRIBUTING.md) - [ ] Added tests (if necessary)...

add a trace/request id to logging

1

**Describe the feature** currently, logs are non-uniform and do not contain any trace/request id to aggregate logs for a single request. adding a request id to the logs allows aggregating...