Skip to content

feat(source-integrity): extend sourceIntegrity for traditional and OCI helm repos#27741

Draft
aali309 wants to merge 17 commits intoargoproj:masterfrom
aali309:helm-provenance-si
Draft

feat(source-integrity): extend sourceIntegrity for traditional and OCI helm repos#27741
aali309 wants to merge 17 commits intoargoproj:masterfrom
aali309:helm-provenance-si

Conversation

@aali309
Copy link
Copy Markdown
Contributor

@aali309 aali309 commented May 7, 2026

This PR extends source integrity verification to support traditional Helm repositories and Helm OCI registries with provenance (.prov) files.

Checklist:

  • Either (a) I've created an enhancement proposal and discussed it with the community, (b) this is a bug fix, or (c) this does not need to be in the release notes.
  • The title of the PR states what changed and the related issues number (used for the release note).
  • The title of the PR conforms to the Title of the PR
  • I've included "Closes [ISSUE #]" or "Fixes [ISSUE #]" in the description to automatically close the associated issue.
  • I've updated both the CLI and UI to expose my feature, or I plan to submit a second PR with them.
  • Does this PR require documentation updates?
  • I've updated documentation as required by this PR.
  • I have signed off all my commits as required by DCO
  • I have written unit and/or e2e tests for my change. PRs without these are unlikely to be merged.
  • My build is green (troubleshooting builds).
  • My new feature complies with the feature status guidelines.
  • I have added a brief description of why this PR is necessary and/or what this PR solves.
  • Optional. My organization is added to USERS.md.
  • Optional. For bug fixes, I've indicated what older releases this fix should be cherry-picked into (this may or may not happen depending on risk/complexity).

@bunnyshell
Copy link
Copy Markdown

bunnyshell Bot commented May 7, 2026

❗ Preview Environment deployment failed on Bunnyshell

See: Environment Details | Pipeline Logs

Available commands (reply to this comment):

  • 🚀 /bns:deploy to redeploy the environment
  • /bns:delete to remove the environment

@aali309 aali309 force-pushed the helm-provenance-si branch 7 times, most recently from b063695 to 6ec4ca4 Compare May 8, 2026 01:49
Comment thread reposerver/repository/repository.go Fixed
@aali309 aali309 force-pushed the helm-provenance-si branch from 1035a5f to 7240445 Compare May 8, 2026 02:16
aali309 added 8 commits May 7, 2026 23:33
Signed-off-by: Atif Ali <atali@redhat.com>
Signed-off-by: Atif Ali <atali@redhat.com>
Signed-off-by: Atif Ali <atali@redhat.com>
Signed-off-by: Atif Ali <atali@redhat.com>
Signed-off-by: Atif Ali <atali@redhat.com>
Signed-off-by: Atif Ali <atali@redhat.com>
Signed-off-by: Atif Ali <atali@redhat.com>
Signed-off-by: Atif Ali <atali@redhat.com>
@aali309 aali309 force-pushed the helm-provenance-si branch from 7240445 to 9298cf6 Compare May 8, 2026 05:07
@aali309 aali309 changed the title feat(source-integrity): extend sourceIntegrity for traditional helm repo feat(source-integrity): extend sourceIntegrity for traditional and OCI helm repos May 8, 2026
aali309 added 9 commits May 8, 2026 02:24
Signed-off-by: Atif Ali <atali@redhat.com>
Signed-off-by: Atif Ali <atali@redhat.com>
Signed-off-by: Atif Ali <atali@redhat.com>
Signed-off-by: Atif Ali <atali@redhat.com>
Signed-off-by: Atif Ali <atali@redhat.com>
Signed-off-by: Atif Ali <atali@redhat.com>
Signed-off-by: Atif Ali <atali@redhat.com>
…on where repo-server doesn't reload keys from ConfigMap

Signed-off-by: Atif Ali <atali@redhat.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants