Skip to content

feat(helm): sign helm chart using helm-sigstore plugin #450

@neilime

Description

@neilime

More infos about signing helm charts :

  1. Generate a .prov file using helm sign command : https://helm.sh/docs/topics/provenance/
  2. Upload the .prov file using helm sigstore upload <path_to_packaged_chart>
  3. Add following infos in Chart.yaml
annotations:
  artifacthub.io/signKey: |
    fingerprint: <empreinte de votre clé>
    url: <url publique de la clé ou du certificat>

For the GPG part we can use this action by crazy-max 😅 : https://github.com/marketplace/actions/import-gpg

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels
    No fields configured for Enhancement.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions