sigstore / policy-controller

Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign

sigstore/policy-controller Issues

Events on validation fail
Updated 17 days ago
AKS Policy Controller Digest & Authentication Error
Closed a month ago2
Support for Sigstore Bundle Specification
Updated 2 months ago2
Reduce verbosity option in policy-tester
Closed 2 months ago1
Verify only pods
Updated 2 months ago
Convert SigstoreKeys to TrustedRoot from protobuf-specs
Closed 3 months ago
Add testdata generator for trustroot reconciler tests
Closed 3 months ago1
Request to support non-identity based cert as verifier
Updated 3 months ago1
Getting x509: certificate signed by unknown authority Error after applying ClusterImagePolicy
Updated 5 months ago
How can I disable mutation for managed sidecars
Updated 5 months ago2
re-create expired tuf root
Closed 7 months ago
Image Tag Mutating Webhook Causes Existing Deployments to go in Creation Loop
Closed 7 months ago5
Signature key validation failed
Updated 7 months ago1
policy creation error: failed to call webhook defaulting
Updated 7 months ago2
Context deadline on my webhook
Updated 7 months ago
Disable update of "top level" objects
Updated 8 months ago3
ci: gh runner failing due to lack of space on device
Closed a year ago2
some question about configuration of ClusterImagePolicy for keyless mode
Updated a year ago1
Support Verification with Root CA
Updated a year ago
How can I configure multiple self-signed certificates?
Closed a year ago2
Liveness and Readiness Probes Consistently Failing
Updated a year ago3
policy controller taking longer then 30s to complete
Closed a year ago1
I configured a "static" authorities but nothing help, is there anything wrong?
Updated a year ago3
Signature IDs aren't unique for the same image
Closed a year ago
Combine the two controller pods into a single pod
Closed a year ago
Support keyless Signature verification using only Root certificate
Updated a year ago8
Feature Request: namespaced ImagePolicy
Updated a year ago
Not able to deploy policy controller in Disable TUF mode
Closed a year ago3
Simple policy to require a signature
Closed a year ago8
policy controller restarts if helm release name is not "policy-controller"
Closed a year ago5
No matching policies (Restricted Environment)
Updated a year ago10
Support Common Expression Language (CEL)
Updated a year ago
Policy-controller failed to validate pods
Updated a year ago4
https_proxy support to download tuf-root from https://sigstore-tuf-root.storage.googleapis.com/
Closed a year ago6
How to integrate own kms into Cosign and policy-controller admission controller?
Updated a year ago2
Add annotations to objects admitted by policy-controller
Updated a year ago5
Implement a simple in-mem cache (with opt-in).
Updated a year ago2
Request: Policy-controller project logo
Closed a year ago3
Re-organize the README to point to our sigstore docs
Closed a year ago
'Cut Release' gh action failed to upload the provenance data
Closed a year ago2
Prepare API type to v1
Updated a year ago
Missing support for keys generated and pushed automatically by cosign in Kubernetes
Updated a year ago1
A question about deploying signed and non-signed images combined with glob pattern
Updated a year ago1
policy-tester off main branch fails to validate vuln attestations
Closed a year ago7
Deprecate and starting to warn when folks use the short-name version of the predicate type?
Closed a year ago2
webhook error: x509: certificate signed by unknown authority
Closed a year ago3
Add support for slsa provenance verification
Updated a year ago
Error when using AWS KMS to verify images
Closed a year ago1
If namespace is given to secret ref and it's not the same as in the policy-controller namespace, it should fail.
Closed a year ago4
Better support for hashivault KMS - based validation
Updated a year ago