Skip to content

Conversation

@pjbgf
Copy link
Member

@pjbgf pjbgf commented Nov 20, 2025

The verification process that takes places during the slsav1 provenance generation requires a tag to correctly ascertain the signing subject. This ensures that alongside the digest which is required for the cosign sign command, a tag is added to the image, so that later on in the process it can be used by slsactl.

The verification process that takes places during the slsav1 provenance generation
requires a tag to correctly ascertain the signing subject. This ensures that alongside
the digest which is required for the cosign sign command, a tag is added to the image,
so that later on in the process it can be used by slsactl.

Signed-off-by: Paulo Gomes <[email protected]>
@pjbgf
Copy link
Member Author

pjbgf commented Nov 20, 2025

The test execution can be seen here.

@rafaelbreno rafaelbreno merged commit 8b2e712 into rancher:master Nov 20, 2025
1 check passed
@pjbgf pjbgf deleted the fqi branch November 20, 2025 13:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants