From c9417a4559b3fea1a8577f2a9ebfe7572b9fbdc4 Mon Sep 17 00:00:00 2001 From: Edward Brough Date: Fri, 19 May 2023 20:12:54 +0000 Subject: [PATCH 1/4] Adding Gitpod Provider Signed-off-by: Edward Brough --- config/config.jsn | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/config/config.jsn b/config/config.jsn index 6c2dff21e..336ba3a7c 100644 --- a/config/config.jsn +++ b/config/config.jsn @@ -20,6 +20,11 @@ "IssuerURL": "https://token.actions.githubusercontent.com", "ClientID": "sigstore", "Type": "github-workflow" + }, + "https://api.gitpod.io/idp": { + "IssuerURL": "https://api.gitpod.io/idp", + "ClientID": "sigstore", + "Type": "email" } } } From 8e911b8b910eaf48cf670a661d5d3bdf78764888 Mon Sep 17 00:00:00 2001 From: Edward Brough Date: Sat, 20 May 2023 07:11:05 +0000 Subject: [PATCH 2/4] Adding federation config for Gitpod.io Signed-off-by: Edward Brough --- federation/gitpod.io/config.yaml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 federation/gitpod.io/config.yaml diff --git a/federation/gitpod.io/config.yaml b/federation/gitpod.io/config.yaml new file mode 100644 index 000000000..413c379bc --- /dev/null +++ b/federation/gitpod.io/config.yaml @@ -0,0 +1,18 @@ +# Copyright 2023 The Sigstore Authors +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. + +url: https://api.gitpod.io/idp +contact: tbd +description: "Gitpod OIDC auth" +type: "email" From 1e8e8eacaa9373b788407c977bed5fc840fc3cdd Mon Sep 17 00:00:00 2001 From: Edward Brough Date: Mon, 22 May 2023 08:34:27 +0000 Subject: [PATCH 3/4] Adding additional fulcio-config for Gitpod Signed-off-by: Edward Brough --- config/fulcio-config.yaml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/config/fulcio-config.yaml b/config/fulcio-config.yaml index ba14fc7df..956f3b98f 100644 --- a/config/fulcio-config.yaml +++ b/config/fulcio-config.yaml @@ -73,6 +73,11 @@ data: "IssuerURL": "https://token.actions.githubusercontent.com", "ClientID": "sigstore", "Type": "github-workflow" + }, + "https://api.gitpod.io/idp": { + "IssuerURL": "https://api.gitpod.io/idp", + "ClientID": "sigstore", + "Type": "email" } }, "MetaIssuers": { From b295a6779aa3f4376e1f17440afffcde3c941e61 Mon Sep 17 00:00:00 2001 From: Edward Brough Date: Tue, 23 May 2023 15:48:15 +0000 Subject: [PATCH 4/4] reordering config and adding contact email Signed-off-by: Edward Brough --- config/config.jsn | 10 +++++----- config/fulcio-config.yaml | 10 +++++----- federation/gitpod.io/config.yaml | 2 +- 3 files changed, 11 insertions(+), 11 deletions(-) diff --git a/config/config.jsn b/config/config.jsn index 336ba3a7c..9def8e28b 100644 --- a/config/config.jsn +++ b/config/config.jsn @@ -5,6 +5,11 @@ "ClientID": "sigstore", "Type": "email" }, + "https://api.gitpod.io/idp": { + "IssuerURL": "https://api.gitpod.io/idp", + "ClientID": "sigstore", + "Type": "email" + }, "https://oauth2.sigstore.dev/auth": { "IssuerURL": "https://oauth2.sigstore.dev/auth", "ClientID": "sigstore", @@ -20,11 +25,6 @@ "IssuerURL": "https://token.actions.githubusercontent.com", "ClientID": "sigstore", "Type": "github-workflow" - }, - "https://api.gitpod.io/idp": { - "IssuerURL": "https://api.gitpod.io/idp", - "ClientID": "sigstore", - "Type": "email" } } } diff --git a/config/fulcio-config.yaml b/config/fulcio-config.yaml index 956f3b98f..f7404b722 100644 --- a/config/fulcio-config.yaml +++ b/config/fulcio-config.yaml @@ -53,6 +53,11 @@ data: "ClientID": "sigstore", "Type": "gitlab-pipeline" }, + "https://api.gitpod.io/idp": { + "IssuerURL": "https://api.gitpod.io/idp", + "ClientID": "sigstore", + "Type": "email" + }, "https://gitlab.com": { "IssuerURL": "https://gitlab.com", "ClientID": "sigstore", @@ -73,11 +78,6 @@ data: "IssuerURL": "https://token.actions.githubusercontent.com", "ClientID": "sigstore", "Type": "github-workflow" - }, - "https://api.gitpod.io/idp": { - "IssuerURL": "https://api.gitpod.io/idp", - "ClientID": "sigstore", - "Type": "email" } }, "MetaIssuers": { diff --git a/federation/gitpod.io/config.yaml b/federation/gitpod.io/config.yaml index 413c379bc..5f400962b 100644 --- a/federation/gitpod.io/config.yaml +++ b/federation/gitpod.io/config.yaml @@ -13,6 +13,6 @@ # limitations under the License. url: https://api.gitpod.io/idp -contact: tbd +contact: support@gitpod.io description: "Gitpod OIDC auth" type: "email"