diff --git a/Dockerfile b/Dockerfile index a6bd4cd..df51999 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.23rc1 as builder +FROM golang:1.23rc1 AS builder WORKDIR /usr/src/vault-kubernetes-kms COPY go.mod go.sum ./ RUN go mod download && go mod verify diff --git a/docs/sign.md b/docs/sign.md new file mode 100644 index 0000000..6e952a9 --- /dev/null +++ b/docs/sign.md @@ -0,0 +1,92 @@ +# Artifact signing and SBOMs +Since `v0.2.0` `vault-kubernetes-kms` release artifacts are signed using `cosign`. We also publish a SBOMs. + +## SBOMs +SBOMs are published for every release. See [https://github.com/FalcoSuessgott/vault-kubernetes-kms/releases](https://github.com/FalcoSuessgott/vault-kubernetes-kms/releases) + +## Verify Container signatures +`vault-kubernetes` Container Images are signed using `cosign` and ephemeral certificates signed during Github Actions runs. To verify a Container signature you can use the following oneliner: + +```bash +$> cosign verify ghcr.io/falcosuessgott/vault-kubernetes-kms:v0.2.1 \ + --certificate-identity="https://github.com/FalcoSuessgott/vault-kubernetes-kms/.github/workflows/goreleaser.yml@refs/tags/v0.2.1" \ + --certificate-oidc-issuer="https://token.actions.githubusercontent.com" | jq . + +Verification for ghcr.io/falcosuessgott/vault-kubernetes-kms:v0.2.1 -- +The following checks were performed on each of these signatures: + - The cosign claims were validated + - Existence of the claims in the transparency log was verified offline + - The code-signing certificate was verified using trusted certificate authority certificates +[ + { + "critical": { + "identity": { + "docker-reference": "ghcr.io/falcosuessgott/vault-kubernetes-kms" + }, + "image": { + "docker-manifest-digest": "sha256:f84b3e0acc178e1b8bcf13bb7868b93ef67b9fceff76ddfaaec85238dd026b31" + }, + "type": "cosign container image signature" + }, + "optional": { + "1.3.6.1.4.1.57264.1.1": "https://token.actions.githubusercontent.com", + "1.3.6.1.4.1.57264.1.2": "push", + "1.3.6.1.4.1.57264.1.3": "74d0643af3e6528bdb7346de4f046e509e50a115", + "1.3.6.1.4.1.57264.1.4": "goreleaser", + "1.3.6.1.4.1.57264.1.5": "FalcoSuessgott/vault-kubernetes-kms", + "1.3.6.1.4.1.57264.1.6": "refs/tags/v0.2.1", + "Bundle": { + "SignedEntryTimestamp": "MEUCID1CweAvlouvESD7+poEWehgdA4QGrSCk92BAFjdPEovAiEA+HipvN0melZl0/QjzHV7r3jgzibZ3gi0GsIIynhkrKo=", + "Payload": { + "body": "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", + "integratedTime": 1723796362, + "logIndex": 121966596, + "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d" + } + }, + "Issuer": "https://token.actions.githubusercontent.com", + "Subject": "https://github.com/FalcoSuessgott/vault-kubernetes-kms/.github/workflows/goreleaser.yml@refs/tags/v0.2.1", + "githubWorkflowName": "goreleaser", + "githubWorkflowRef": "refs/tags/v0.2.1", + "githubWorkflowRepository": "FalcoSuessgott/vault-kubernetes-kms", + "githubWorkflowSha": "74d0643af3e6528bdb7346de4f046e509e50a115", + "githubWorkflowTrigger": "push" + } + }, + { + "critical": { + "identity": { + "docker-reference": "ghcr.io/falcosuessgott/vault-kubernetes-kms" + }, + "image": { + "docker-manifest-digest": "sha256:f84b3e0acc178e1b8bcf13bb7868b93ef67b9fceff76ddfaaec85238dd026b31" + }, + "type": "cosign container image signature" + }, + "optional": { + "1.3.6.1.4.1.57264.1.1": "https://token.actions.githubusercontent.com", + "1.3.6.1.4.1.57264.1.2": "push", + "1.3.6.1.4.1.57264.1.3": "74d0643af3e6528bdb7346de4f046e509e50a115", + "1.3.6.1.4.1.57264.1.4": "goreleaser", + "1.3.6.1.4.1.57264.1.5": "FalcoSuessgott/vault-kubernetes-kms", + "1.3.6.1.4.1.57264.1.6": "refs/tags/v0.2.1", + "Bundle": { + "SignedEntryTimestamp": "MEQCIGgxn2BBR1cXbokbpNQeA9WtLiAk5sf0qmcSsEwCzq6FAiB7D/epTTwqkJGmaPAa86e0DDksYxlEup190+EZU6wxKA==", + "Payload": { + "body": "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", + "integratedTime": 1723796365, + "logIndex": 121966609, + "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d" + } + }, + "Issuer": "https://token.actions.githubusercontent.com", + "Subject": "https://github.com/FalcoSuessgott/vault-kubernetes-kms/.github/workflows/goreleaser.yml@refs/tags/v0.2.1", + "githubWorkflowName": "goreleaser", + "githubWorkflowRef": "refs/tags/v0.2.1", + "githubWorkflowRepository": "FalcoSuessgott/vault-kubernetes-kms", + "githubWorkflowSha": "74d0643af3e6528bdb7346de4f046e509e50a115", + "githubWorkflowTrigger": "push" + } + } +] +``` \ No newline at end of file diff --git a/mkdocs.yml b/mkdocs.yml index d157472..419f2fc 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -52,6 +52,7 @@ nav: - quickstart.md - configuration.md - concepts.md + - sign.md - integration.md - troubleshooting.md - development.md