mirror of
https://abf.rosa.ru/djam/cosign.git
synced 2025-02-22 16:02:59 +00:00
48 lines
1 KiB
RPMSpec
48 lines
1 KiB
RPMSpec
%define debug %nil
|
|
%define debug_package %nil
|
|
|
|
Name: cosign
|
|
Version: 2.4.3
|
|
Release: 1
|
|
Summary: Code signing and transparency for containers and binaries
|
|
URL: https://github.com/sigstore/cosign
|
|
Source0: %{url}/archive/v%{version}/%{name}-%{version}.tar.gz
|
|
License: ASL 2.0
|
|
Group: Development/Other
|
|
BuildRequires: go
|
|
BuildRequires: git-core
|
|
BuildRequires: upx
|
|
|
|
%description
|
|
Signing OCI containers (and other artifacts) using Sigstore!
|
|
|
|
Cosign aims to make signatures invisible infrastructure.
|
|
|
|
Cosign supports:
|
|
|
|
- "Keyless signing" with the Sigstore public good Fulcio
|
|
certificate authority and Rekor transparency log (default)
|
|
- Hardware and KMS signing
|
|
- Signing with a cosign generated encrypted private/public
|
|
keypair
|
|
- Container Signing, Verification and Storage in an OCI
|
|
registry.
|
|
- Bring-your-own PKI
|
|
|
|
|
|
%prep
|
|
%setup -q
|
|
|
|
%build
|
|
export GOPROXY=https://proxy.golang.org/cached-only
|
|
%make GIT_VERSION="v%{version}"
|
|
|
|
upx %{name}
|
|
|
|
%install
|
|
install -Dm0755 %{name} %{buildroot}%{_bindir}/%{name}
|
|
|
|
%files
|
|
%doc README.md LICENSE
|
|
%{_bindir}/%{name}
|
|
|