Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Feature]: Have our production Docker builds verify their attestation at runtime, before running #1310

Open
aldur opened this issue Feb 6, 2025 · 0 comments · May be fixed by #1476
Open

[Feature]: Have our production Docker builds verify their attestation at runtime, before running #1310

aldur opened this issue Feb 6, 2025 · 0 comments · May be fixed by #1476
Assignees
@fabergat
Milestone
sBTC: Withdrawal ...

Comments

@aldur
Copy link
Collaborator

aldur commented Feb 6, 2025

gh attestation verify can be skipped accidentally or because of sloppiness.

Can the environment by default execute this check and only run the code if it passes?

We should probably provide signers an opt-out flag for example for testing or other purposes.
@aldur aldur added this to the sBTC: Deposits milestone Feb 6, 2025
@aldur aldur added this to sBTC Feb 6, 2025
@github-project-automation github-project-automation bot moved this to Needs Triage in sBTC Feb 6, 2025
@aldur aldur moved this from Needs Triage to Todo in sBTC Feb 6, 2025
@djordon djordon moved this from Todo to In Progress in sBTC Feb 28, 2025
@fabergat fabergat linked a pull request Mar 5, 2025 that will close this issue
Open
4 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@fabergat fabergat

Labels
None yet
Projects
sBTC
Status: In Progress
Milestone
sBTC: Withdrawal fine tuning
Development

Successfully merging a pull request may close this issue.

feat: Add attestation entry point to Docker Images stacks-network/sbtc
3 participants
@aldur @djordon @fabergat