diff --git a/content/en/system_config/public_deployment.md b/content/en/system_config/public_deployment.md index 4a062ea0..3d3b9ab0 100644 --- a/content/en/system_config/public_deployment.md +++ b/content/en/system_config/public_deployment.md @@ -28,15 +28,14 @@ These instances are operated and maintained in the same manner as the public pro To use this instance, follow the steps below: 1. `rm -r ~/.sigstore` -1. `curl -O https://raw.githubusercontent.com/sigstore/root-signing/main/staging/repository/1.root.json` +1. `curl -O https://raw.githubusercontent.com/sigstore/root-signing-staging/main/metadata/root_history/1.root.json` 1. `cosign initialize --mirror=https://tuf-repo-cdn.sigstage.dev --root=1.root.json` 1. `cosign sign --oidc-issuer "https://oauth2.sigstage.dev/auth" --fulcio-url "https://fulcio.sigstage.dev" --rekor-url "https://rekor.sigstage.dev" ${IMAGE_DIGEST}` -1. `cosign verify --rekor-url "https://rekor.sigstage.dev" ${IMAGE}` --certificate-identity=name@example.com - --certificate-oidc-issuer=https://accounts.example.com +1. `cosign verify --rekor-url "https://rekor.sigstage.dev" ${IMAGE} --certificate-identity=name@example.com --certificate-oidc-issuer=https://accounts.example.com -* Steps 1-4 configure your local environment to use the staging keys and certificates. -* Step 5 specifies the staging environment with flags needed for signing. -* Step 6 specifies the staging environment with flags needed for verifying. +* Steps 1-3 configure your local environment to use the staging keys and certificates. +* Step 4 specifies the staging environment with flags needed for signing. +* Step 5 specifies the staging environment with flags needed for verifying. #### Revert Back to Production