[go: up one dir, main page]

Skip to content

Resolve "Keyless signing with sigstore not working in child pipelines"

What does this MR do and why?

In the related issue, the infrastructure team are reporting failures integrating with Sigstore via cosign in child pipelines. grouppipeline security identified the root cause and pushed a fix in the original MR.

I've confirmed the fix is good and enabled the FF globally. This MR removes the FF as it is no longer needed.

References

Screenshots or screen recordings

https://gitlab.com/gitlab-org/gitlab/-/issues/422146#note_2832976172

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #422146

Edited by Sam Roque-Worcel

Merge request reports

Loading