Implement Cosign signatures in pipeline
Summary
This issue will cover the actual code changes that need to be made to the pipeline to enable us to use Cosign to sign images in registry.
Changes
- The
harbor
stage will need to be updated to leverage thecosign
binary after the image has been pushed to registry1cosign sign --key awskms:///<tbd prod key id> registry1.dso.mil/ironbank/redhat/ubi/ubi8:8.5
Edited by Tim Seagren