forgejo-mcp/secrets/cosign.pub
Christoph Görn d3fcc3d2eb
ci: 🔒️ provision cosign signing material for release pipeline
- secrets/cosign-signing-key.enc.yaml: SOPS-encrypted k8s Secret
  (cosign.key + cosign.password) produced by ci/cosign-keygen.sh
- secrets/cosign.pub: ECDSA P-256 public verification key
- .sops.yaml: encryption policy (data/stringData/tls, two PGP recipients)
- Mirrored COSIGN_PRIVATE_KEY + COSIGN_PASSWORD to Codeberg
  Actions repo secrets via Forgejo API (one-way sync from SOPS)
- .beads/issues.jsonl: tracking bead forgejo-mcp-phn (closed)
2026-05-24 13:12:24 +02:00

4 lines
178 B
Text

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEWURZMiQfSUhC9SCarqpQHC9FR38L
SidTBK1kwSJFdE9SgFXKkH/1T2mTPPU0ZzhA2hVmWkR3RA40fdlAWeW+cw==
-----END PUBLIC KEY-----