mirror of
https://github.com/helm/helm.git
synced 2026-03-27 21:04:29 -04:00
ce83a8a777
This adds support for OpenPGP signatures containing provenance data. Such information can be used to verify the integrity of a Chart by testing that its file hash, metadata, and images are correct. This first PR does not contain all of the tooling necessary for end-to-end chart integrity. It contains just the library. See #983
7 lines
171 B
YAML
7 lines
171 B
YAML
description: Test chart versioning
|
|
name: hashtest
|
|
version: 1.2.3
|
|
|
|
...
|
|
files:
|
|
hashtest-1.2.3.tgz: sha256:8e90e879e2a04b1900570e1c198755e46e4706d70b0e79f5edabfac7900e4e75
|