Skip to content

feat: add chart signing#41

Open
bpsoraggi wants to merge 2 commits intostefanprodan:masterfrom
bpsoraggi:feat/add-signing-option
Open

feat: add chart signing#41
bpsoraggi wants to merge 2 commits intostefanprodan:masterfrom
bpsoraggi:feat/add-signing-option

Conversation

@bpsoraggi
Copy link

@bpsoraggi bpsoraggi commented Jul 30, 2025

Add gpg signing with provenance files

POC

Successful workflow run

# Verification:
> helm fetch --verify signtest/traefik --version 37.2.0

# Output:
Signed by: TraefikLabs Chart Signing TEST
Using Key With Fingerprint: 914A61B3ABE75433CFEFB6248D4B6755CF1C52AB
Chart Hash Verified: sha256:7f7299ef51628530881244daa8d380c738c2c4cd750255ee0f90f850ddcea2a5

@mloiseleur
Copy link

@stefanprodan Thanks for this very handy GH action.

This PR has been used successfully for the latest releases of Traefik Helm chart.

Anything missing in order for this PR to be reviewed ?

@darkweaver87
Copy link

@stefanprodan could you have a look please ? 🥺

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants