Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

refactor(registry): use aqua for slsa-verifier #4325

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

scop
Copy link
Contributor

@scop scop commented Feb 6, 2025

No description provided.

@scop scop force-pushed the refactor/aqua-slsa-verifier branch from f844916 to 7032e71 Compare February 6, 2025 13:28
@jdx
Copy link
Owner

jdx commented Feb 6, 2025

I think because aqua depends on slsa-verifier this is causing an endless loop

@scop
Copy link
Contributor Author

scop commented Feb 6, 2025

Hm, from https://aquaproj.github.io/docs/reference/security/cosign-slsa/

You don't have to install Cosign and slsa-verifier, because aqua installs Cosign automatically and slsa-verifier is embedded to aqua as Go library.

...but IDK if that's relevant as I believe mise reimplements aqua registry support itself.

@scop
Copy link
Contributor Author

scop commented Feb 6, 2025

Anyway mise use -g aqua:slsa-framework/slsa-verifier works for me.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants