Skip to content

Commit

Permalink
Update instructions for verifying against staging (#315)
Browse files Browse the repository at this point in the history
Root moved to a different repo

Signed-off-by: Hayden B <[email protected]>
  • Loading branch information
haydentherapper authored Jul 10, 2024
1 parent 2a1fa32 commit bdd2771
Showing 1 changed file with 5 additions and 6 deletions.
11 changes: 5 additions & 6 deletions content/en/system_config/public_deployment.md
Original file line number Diff line number Diff line change
Expand Up @@ -28,15 +28,14 @@ These instances are operated and maintained in the same manner as the public pro
To use this instance, follow the steps below:

1. `rm -r ~/.sigstore`
1. `curl -O https://raw.githubusercontent.com/sigstore/root-signing/main/staging/repository/1.root.json`
1. `curl -O https://raw.githubusercontent.com/sigstore/root-signing-staging/main/metadata/root_history/1.root.json`
1. `cosign initialize --mirror=https://tuf-repo-cdn.sigstage.dev --root=1.root.json`
1. `cosign sign --oidc-issuer "https://oauth2.sigstage.dev/auth" --fulcio-url "https://fulcio.sigstage.dev" --rekor-url "https://rekor.sigstage.dev" ${IMAGE_DIGEST}`
1. `cosign verify --rekor-url "https://rekor.sigstage.dev" ${IMAGE}` --certificate-identity=[email protected]
--certificate-oidc-issuer=https://accounts.example.com
1. `cosign verify --rekor-url "https://rekor.sigstage.dev" ${IMAGE} --certificate-identity=[email protected] --certificate-oidc-issuer=https://accounts.example.com

* Steps 1-4 configure your local environment to use the staging keys and certificates.
* Step 5 specifies the staging environment with flags needed for signing.
* Step 6 specifies the staging environment with flags needed for verifying.
* Steps 1-3 configure your local environment to use the staging keys and certificates.
* Step 4 specifies the staging environment with flags needed for signing.
* Step 5 specifies the staging environment with flags needed for verifying.

#### Revert Back to Production

Expand Down

0 comments on commit bdd2771

Please sign in to comment.