mirrors/pkg-proxy
Watch
1
0
Fork
You've already forked pkg-proxy
 1
mirror of https://github.com/git-pkgs/proxy.git synced 2026-08-23 04:14:57 -04:00
Code Issues Releases Packages Wiki Activity
pkg-proxy/.github
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Andrew Nesbitt a17bdc7c89
 Sign published container images (#227) 
* Sign published container images

* Attest per-platform SPDX SBOMs with cosign

Extract each platform's SPDX document from the BuildKit SBOM attestation
and sign it as a cosign spdxjson attestation against the manifest-list
digest, so downstream consumers (e.g. Kyverno image-verification policies)
can verify the predicate signature rather than relying on the unsigned
BuildKit attachment.
2026-08-10 16:42:52 +01:00
..
workflows Sign published container images (#227) 2026-08-10 16:42:52 +01:00
dependabot.yml Add Docker ecosystem to Dependabot config 2026-03-19 10:24:26 +00:00