feat: Update Cosign to 2.2.1

sse-secure-systems · Nov 20, 2023 · caba0d3 · caba0d3
1 parent a96c88b
commit caba0d3
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/Makefile b/Makefile
@@ -1,7 +1,7 @@
 NAMESPACE = connaisseur
 IMAGE_REPOSITORY := $(shell yq e '.kubernetes.deployment.image.repository' helm/values.yaml)
 VERSION := $(shell yq e '.appVersion' helm/Chart.yaml)
-COSIGN_VERSION = 2.2.0
+COSIGN_VERSION = 2.2.1
 
 .PHONY: all docker install uninstall upgrade annihilate
 

diff --git a/connaisseur/validators/cosign/cosign_validator.py b/connaisseur/validators/cosign/cosign_validator.py
@@ -364,6 +364,9 @@ def __get_envs(self):
         # Extend the OS env vars only for passing to the subprocess below
         env["DOCKER_CONFIG"] = f"/app/connaisseur-config/{self.name}/.docker/"
         env["TUF_ROOT"] = "/app/.sigstore"
+        env[
+            "SIGSTORE_NO_CACHE"
+        ] = "1"  # Otherwise, Cosign will try to write cache files to disk
         if safe_path_func(
             os.path.exists, "/app/certs/cosign", f"/app/certs/cosign/{self.name}.crt"
         ):