|
1 | 1 | # Cosign
|
2 | 2 |
|
3 | 3 | ## Introduction
|
4 |
| -The **Cosign** plugin by Devtron enables secure signing of your container images. By integrating the Cosign plugin, you can enhance your supply chain security by ensuring authenticity, and integrity of your container image. |
| 4 | +The **Cosign** plugin by Devtron enables secure signing of your container images, enhancing supply chain security. It authenticates your identity as the creator and ensures image integrity, allowing users to verify the source and detect any tampering. This provides greater assurance to developers incorporating your artifacts into their workflows. |
5 | 5 |
|
6 | 6 | ### Prerequisites
|
7 |
| -Before integrating the Cosign plugin, ensure that you have configured the Cosign account and have a set of private and public keys to sign the container images. |
| 7 | +Before integrating the Cosign plugin, ensure that you have configured the Cosign and have a set of private and public keys to sign the container images. |
8 | 8 |
|
9 | 9 | ---
|
10 | 10 |
|
@@ -40,12 +40,12 @@ e.g., `The Cosign plugin is integrated for ensuring the authenticity of contain
|
40 | 40 |
|
41 | 41 | | Variable | Format | Description | Sample Value |
|
42 | 42 | | ------------------------ | ------------ | ----------- | ------------ |
|
43 |
| -| PrivateKeyFilePath | STRING | Path of private key file in Git repo | cosign/cosign.key | |
| 43 | +| PrivateKeyFilePath | STRING | Path of private key file in Git repo | cosign/cosign.key | |
44 | 44 | | PostCommand | STRING | Command to run after image is signed by Cosign | cosign verify $DOCKER_IMAGE |
|
45 |
| -| ExtraArguments | STRING | Arguments for Cosign command | --certificate-identity=name@example.com | |
| 45 | +| ExtraArguments | STRING | Arguments for Cosign command | --certificate-identity=name@example.com | |
46 | 46 | | CosignPassword | STRING | Password for Cosign private key | S3cur3P@ssw0rd123! |
|
47 |
| -| VariableAsPrivateKey | STRING | base64 encoded private-key | LS0tLS1CRUdJTiBQUklWQVRFIEtFWS0tLS | |
48 |
| -| PreCommand | STRING | Command to get the requried conditions to execute Cosign command | curl -sLJO https://raw.githubusercontent.com/devtron-labs/sampleRepo/branchName/private | |
| 47 | +| VariableAsPrivateKey | STRING | base64 encoded private-key | @{{COSIGN_PRIVATE_KEY}} | |
| 48 | +| PreCommand | STRING | Command to get the required conditions to execute Cosign command | curl -sLJO https://raw.githubusercontent.com/devtron-labs/sampleRepo/branchName/private | |
49 | 49 |
|
50 | 50 | ### Trigger/Skip Condition
|
51 | 51 | Here you can set conditions to execute or skip the task. You can select `Set trigger conditions` for the execution of a task or `Set skip conditions` to skip the task.
|
|
0 commit comments