Sign provenance files

[philips-labs]

Sign provenance files

[pieterlexis]

I'm using the DSSE signing implementation of sigstore in #91 which indeed generates the payload and signatures as defined in in-toto.

I think the integration of the generated, signed provenance is beyond the scope of what I intended to implement in #91.

[marcofranssen]

@pieterlexis yes integrating the attaching to docker images or auto uploading to Github releases can be done from separate PR.

[ChaosInTheCRD]

I would be interested in working on this PR ✋ 😄

[ChaosInTheCRD]

For Docker Images, I have been looking at the implementation within Tekton Chains... and I can see it could be possible to do something similar here too

https://github.com/tektoncd/chains/blob/a7e0557bf10abbe1d4f3f90e947857ba87890194/pkg/chains/storage/oci/oci.go#L100

I wonder if this should be integrated as part of the sign-provenance action that @pieterlexis has written. In an ideal world, you would be able to have all of this completed within a single command, like:

• Declare the repo, digest, tags etc.
• Generate Provenance
• Sign the Provenance
• Push the Provenance to the remote

That way, you can be sure that the attestation has not been modified / compromised before it makes it to the registry.

I wonder if it would be worthwhile for me to expand on #88 so someone can just call a flag that allows a user to achieve all of this for a docker image. As far as I can see with SLSA, this is a common flow for anyone wanting to generate Level 2 Provenance for an image.

[marcofranssen]

@ChaosInTheCRD what you have shared in your workflow tryout https://github.com/ChaosInTheCRD/mic-test/runs/4514052305?check_suite_focus=true is exactly what we would like to achieve once this PR and #88 are merged in a single line command. @pieterlexis could you also have a look at @ChaosInTheCRD his workflow we can achieve this with the combination of both PR's?

[pieterlexis]

The sign action I implemented can sign any json that looks like provenance. Signing actual container images might be out of scope for this (and cosign does that just fine).

If you want to sign the provenance about the container, my action could do that as long as the provenance is in the same format.