configure chainguard source

chainguard-dev · Nov 7, 2023 · a2cbdde · a2cbdde
1 parent fb7bcad
commit a2cbdde
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/.chainguard/source.yaml b/.chainguard/source.yaml
@@ -0,0 +1,13 @@
+# Copyright 2023 Chainguard, Inc.
+# SPDX-License-Identifier: Apache-2.0
+
+spec:
+  authorities:
+    - keyless:
+        # allow commits signed by users using GitHub or Google OIDC
+        identities:
+          - issuer: https://accounts.google.com
+          - issuer: https://github.com/login/oauth
+    - key:
+        # allow commits signed by GitHub, e.g. the UI
+        kms: https://github.com/web-flow.gpg