harness/ff-server-signed repository overview

⁠Quick Reference

Maintained by: Harness Inc (https://www.harness.io/⁠)
Where to get help: The Harness Community Slack (https://harnesscommunity.slack.com/⁠)

⁠What is ff-server-signed?

ff-server-signed is the service that powers Harness Feature Flags. It is built upone the redhat/ubi8 base image.

⁠How to install

docker pull harness/ff-server-signed:<TAG>

⁠License

https://github.com/wings-software/ff-server/blob/master/LICENSE.md⁠

⁠How to download SBOM

cosign download attestation --predicate-type=https://cosign.sigstore.dev/attestation/v1⁠ harness/ff-server-signed:<tag> | jq -r .payload | base64 -d | jq -r .predicate.Data | jq

⁠How to download public key

https://github.com/harness/sbom/blob/main/cosign.pub⁠

⁠How to verify SBOM attestations

cosign verify-attestation --key cosign.pub harness/ff-server-signed:<tag> --output-file results.json