|
3 | 3 | ## Overview
|
4 | 4 |
|
5 | 5 | The `demo-repo-rust` project is a repository template primarily intended for testing and
|
6 |
| -demonstration purposes with stacklok projects. It is a simple Python project that allows you to |
| 6 | +demonstration purposes with Stacklok projects. It is a simple Rust project that allows you to |
7 | 7 | quickly get started with testing and demonstrating how you can use Minder and Trusty with
|
8 |
| -your Python projects. It features continuous integration (CI) workflows that demonstrate how to |
| 8 | +your Rust projects. It features continuous integration (CI) workflows that demonstrate how to |
9 | 9 | build, test, and sign artifacts using Sigstore and GitHub Attestations.
|
10 | 10 |
|
11 |
| - |
12 | 11 | ## Features
|
13 | 12 |
|
14 | 13 | - Pre-configured `Cargo.toml`
|
15 | 14 | - Sample Rust code in `src/main.rs`
|
16 | 15 | - Dockerfile for building a container image
|
17 | 16 |
|
18 | 17 | GitHub Actions workflows for:
|
| 18 | + |
19 | 19 | - Producing signed and unsigned artifacts using Sigstore and GitHub attestations API
|
20 | 20 | - Producing artifacts such as container images and binaries
|
21 | 21 | - Producing container images that are reproducible (always the same digest)
|
22 | 22 | - Producing "malicious" container images for testing purposes (e.g., code content was altered while building the image)
|
23 | 23 |
|
24 | 24 | Makefile targets for simulating out-of-band signing of artifacts (both intended and not):
|
| 25 | + |
25 | 26 | - Generating signed container images and "malicious" images
|
26 | 27 | - Pushing container images to container registry (GHCR)
|
27 | 28 | - Generating a local key pair for signing container images
|
28 | 29 | - Sign container images using Sigstore by using a local key pair or by going through the Sigstore OIDC sign-in flow
|
29 | 30 |
|
30 | 31 | Branches:
|
| 32 | + |
31 | 33 | - Set of pre-created branches to use for opening PRs each demonstrating a different feature or use case with Minder and Trusty
|
32 | 34 |
|
33 | 35 | ## How to Use This Template
|
|
0 commit comments