sigstore-scaffolding-getoidctoken-fips

Minimal Wolfi-based Sigstore images.

Download this Image

The image is available on cgr.dev:

docker pull cgr.dev/chainguard/sigstore-scaffolding:latest

The images in this directory are just the "glue" for bootstrapping the stack, but Chainguard offers minimal images for each of the elements needed by the Sigstore "scaffold" Helm chart for bootstrapping a full sigstore stack.

In addition to these images, the stack also pulls in images from:

• cosign
• fulcio
• rekor
• trillian
• ctlog
• (NYI) timestamp-authority (an optional component only used in some setups)

The stack also pulls in several support images:

• curl
• netcat
• redis
• (NYI) mysql - Currently sigstore relies on the nearly EOL mysql 5.7

To see an example of how we substitute images into the scaffold Helm chart's values.yaml see our values.tf example.