Add Key Management Provider for Trusted Signing

[yizha1]

What would you like to be added?

Currently, Ratify supports fetching certificates/keys stored in Azure Key Vault (AKV) for signature verification. Trusted Signing is a fully managed, end-to-end solution. Here are some benefits:

• Simplified Signing Process
• Zero-Touch Certificate Management
• Integration with Developer Tools
• Support for Various Trust Scenarios

Trusted Signing offers a streamlined signing and verification experience. Therefore, this enhancement request is to add a new Key Management Provider for Trusted Signing.

Anything else you would like to add?

I will create a proposal to describe the scenarios and proposed user experience.

Are you willing to submit PRs to contribute to this feature?

• Yes, I am willing to implement it.

[yizha1]

I recommend considering the enhancement for the upcoming v1.4.0 milestone tentatively, as we first need to prepare the proposal and design document, in addition to planning collaboration with other communities. We can revisit the timeline for this issue in Oct.