Repository navigation
Trusted Publishing Support for BuildKite #13633
Mythra
started this conversation in
Feature Requests
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
It would be great to be able to support BuildKite for trusted publishing. The BuildKite agent does have a way of fetching OIDC Tokens, and it can be used for keyless signing with sigstore so I’m hopeful the bits are all there for Rust.
Supporting BuildKite would allow for supporting many other Forges besides GitHub/GitLab such as CodeBerg/Gerrit/etc. without worrying about the threat model for potential self hosted forges. As the OIDC tokens come from the BuildKite platform even on self hosted runners.
All reactions