diff --git a/docs/getting-started/kubernetes.mdx b/docs/getting-started/kubernetes.mdx index c55e3051d7..b92e767b3a 100644 --- a/docs/getting-started/kubernetes.mdx +++ b/docs/getting-started/kubernetes.mdx @@ -19,8 +19,3 @@ To confirm that the chart you are using is authentic and unmodified, please refe helm install seerr oci://ghcr.io/seerr-team/seerr/seerr-chart ``` Helm values can be found in the Seerr repository under [charts/seerr-chart/README.md](https://github.com/seerr-team/seerr/tree/develop/charts/seerr-chart). - -Verify the signature with [cosign](https://docs.sigstore.dev/cosign/system_config/installation/) (replace [tag], with the TAG you want to verify) : -```console -cosign verify ghcr.io/seerr-team/seerr/seerr-chart:[tag] --certificate-identity=https://github.com/seerr-team/seerr/.github/workflows/helm.yml@refs/heads/main --certificate-oidc-issuer=https://token.actions.githubusercontent.com -``` diff --git a/docs/using-seerr/advanced/verifying-signed-artifacts.mdx b/docs/using-seerr/advanced/verifying-signed-artifacts.mdx index 3ed328676f..8c2d6ea1fd 100644 --- a/docs/using-seerr/advanced/verifying-signed-artifacts.mdx +++ b/docs/using-seerr/advanced/verifying-signed-artifacts.mdx @@ -298,7 +298,7 @@ sha256:abcd1234... ```bash cosign verify ghcr.io/seerr-team/seerr/seerr-chart@sha256:abcd1234... \ - --certificate-identity "https://github.com/seerr-team/seerr/.github/workflows/helm.yml@refs/heads/main" \ + --certificate-identity "https://github.com/seerr-team/seerr/.github/workflows/helm.yml@refs/heads/develop" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" ``` @@ -316,13 +316,13 @@ The following checks were performed: ### Expected Certificate Identity -The expected certificate identity for all signed Seerr images is: +The expected certificate identity for all signed Seerr charts is: ``` -https://github.com/seerr-team/seerr/.github/workflows/helm.yml@refs/heads/main +https://github.com/seerr-team/seerr/.github/workflows/helm.yml@refs/heads/develop ``` -This confirms that the image was: +This confirms that the chart was: - Built by the official Seerr Release workflow - Produced from the seerr-team/seerr repository @@ -339,12 +339,12 @@ This confirms that the image was: DIGEST=$(docker buildx imagetools inspect ghcr.io/seerr-team/seerr/seerr-chart:3.0.0 --format '{{json .Manifest.Digest}}' | tr -d '"') cosign verify ghcr.io/seerr-team/seerr/seerr-chart@"$DIGEST" \ - --certificate-identity-regexp "https://github.com/seerr-team/seerr/.github/workflows/helm.yml@refs/heads/main" \ + --certificate-identity-regexp "https://github.com/seerr-team/seerr/.github/workflows/helm.yml@refs/heads/develop" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" cosign verify-attestation ghcr.io/seerr-team/seerr/seerr-chart@"$DIGEST" \ --type cyclonedx \ - --certificate-identity-regexp "https://github.com/seerr-team/seerr/.github/workflows/helm.yml@refs/heads/main" \ + --certificate-identity-regexp "https://github.com/seerr-team/seerr/.github/workflows/helm.yml@refs/heads/develop" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" ``` @@ -355,7 +355,7 @@ cosign verify-attestation ghcr.io/seerr-team/seerr/seerr-chart@"$DIGEST" \ DIGEST=$(skopeo inspect docker://ghcr.io/seerr-team/seerr/seerr-chart:3.0.0 --format '{{.Digest}}') cosign verify ghcr.io/seerr-team/seerr/seerr-chart@"$DIGEST" \ - --certificate-identity-regexp "https://github.com/seerr-team/seerr/.github/workflows/helm.yml@refs/heads/main" \ + --certificate-identity-regexp "https://github.com/seerr-team/seerr/.github/workflows/helm.yml@refs/heads/develop" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" ```