mirror of
https://github.com/helm/helm.git
synced 2026-05-28 04:35:48 -04:00
ce83a8a777
This adds support for OpenPGP signatures containing provenance data. Such information can be used to verify the integrity of a Chart by testing that its file hash, metadata, and images are correct. This first PR does not contain all of the tooling necessary for end-to-end chart integrity. It contains just the library. See #983
3 lines
83 B
Bash
Executable file
3 lines
83 B
Bash
Executable file
#!/bin/sh
|
|
helm package hashtest
|
|
shasum -a 256 hashtest-1.2.3.tgz > hashtest.sha256
|