Add cosign container_tools module (!1034) · Merge requests · Iron Bank / ironbank-pipeline · GitLab

UNCLASSIFIED - NO CUI

Iron Bank will be replacing the old container signing certificate with the new container signing certificate. No additional action is required. Users can find additional information regarding the certificate rotation and container signature verification here and here.

Cody Miller requested to merge 669-modularize-cosign into master Oct 20, 2022

Merge Request Description

This MR includes the modularized Cosign class from upload_to_harbor.py, making it available for use throughout the pipeline (ex. scan-logic stage).

Merge Request BOE

Risk

Harbor stage

Rollback Plan

Revert MR

Testing

Local & Staging Pipelines

Before: https://code-ib-mario.staging.dso.mil/dsop/redhat/ubi/ubi8/-/jobs/37164

After: https://code-ib-mario.staging.dso.mil/dsop/redhat/ubi/ubi8/-/jobs/37252

Closes #669 (closed)

Edited Oct 25, 2022 by Cody Miller

UNCLASSIFIED - NO CUI