releases/docs/website/content/integrations/cosign.md at 89e02ef8addfa002fffedee12e1172ae741bfc52

mirror of https://github.com/open-policy-agent/opa.git synced 2026-08-28 03:05:04 -06:00

Files

T

Charlie Egan 9bf54788f5 [docs] Move OPA ecosystem pages to site top-level (#6198 )

* We are having trouble managing the complexity of having ecosystem pages shown in the versioned area of the OPA docs site (see website: link ecosystem from edge #6170)
* We have invested in the OPA ecosystem data recently and it makes sense to make it more prominent.
* The data in the OPA Ecosystem is harder to use when nested in docs as some Hugo functions are unavailable to nested sections.

This PR implements a solution by:

* Pages that were under /docs/version/ecosystem, /docs/version/integrations etc have been moved to /ecosystem and /integrations.
* Redirects have been created for the old pages in the netlify config.

Signed-off-by: Charlie Egan <charlie@styra.com>

2023-08-31 09:36:51 +01:00

924 B

Raw Blame History

title, labels, software, inventors, code, vides, docs_features

title

labels

software

inventors

code

vides

docs_features

Container Signing, Verification and Storage in an OCI registry

category	layer
security	application

cosign

sigstore

https://docs.sigstore.dev/cosign/attestation#validate-in-toto-attestations

https://github.com/sigstore/cosign-gatekeeper-provider

https://www.youtube.com/watch?v=gCi9_4NYyR0

go-integration

note
Cosign In-Toto attestations can be [written in Rego](https://docs.sigstore.dev/cosign/attestation/#cosign-custom-predicate-type-and-rego-policy), these are evaluated in the Cosign binary using the Go API.

Cosign is a tool for container image signing and verifying maintained under the Project Sigstore in collaboration with the Linux Foundation. Among other features, Cosign supports KMS signing, built-in binary transparency, and timestamping service with Rekor and Kubernetes policy enforcement.

924 B Raw Blame History

924 B

Raw Blame History