harness/gitops-service-signed repository overview

⁠Quick Reference

Maintained by: Harness Inc (https://www.harness.io/⁠)
Where to get help: The Harness Community Slack (https://harnesscommunity.slack.com/⁠)

⁠What is gitops-service-signed?

gitops-service is the service which powers the Harness GitOps, It is built upon the golang/bullseye base image.

⁠How to install

docker pull harness/gitops-service-signed:<TAG>

⁠License

https://github.com/harness/harness-core/blob/develop/LICENSE.md⁠

⁠How to download SBOM

cosign download attestation --predicate-type=https://cosign.sigstore.dev/attestation/v1⁠ harness/gitops-service-signed:<tag> | jq -r .payload | base64 -d | jq -r .predicate.Data | jq

⁠How to download public key

https://github.com/harness/sbom/blob/main/cosign.pub⁠

⁠How to verify SBOM attestations

cosign verify-attestation --key cosign.pub harness/gitops-service-signed:<tag> --output-file results.json