From 0db9d6f48a8e23f5b885a9b3b34ab83a91e1489a Mon Sep 17 00:00:00 2001 From: Aaron Lew <64337293+aaronlew02@users.noreply.github.com> Date: Thu, 4 Dec 2025 18:23:48 -0500 Subject: [PATCH] Update instructions for initializing with public staging environment Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com> --- .../cosign/system_config/public_deployment.md | 18 ++---------------- 1 file changed, 2 insertions(+), 16 deletions(-) diff --git a/content/en/cosign/system_config/public_deployment.md b/content/en/cosign/system_config/public_deployment.md index aa15dcd3..376f863d 100644 --- a/content/en/cosign/system_config/public_deployment.md +++ b/content/en/cosign/system_config/public_deployment.md @@ -25,22 +25,8 @@ These instances are operated and maintained in the same manner as the public pro ### Usage -To use this instance, follow the steps below: - -1. `rm -r ~/.sigstore` -1. `curl -O https://raw.githubusercontent.com/sigstore/root-signing-staging/main/metadata/root_history/1.root.json` -1. `cosign initialize --mirror=https://tuf-repo-cdn.sigstage.dev --root=1.root.json` -1. `curl -O https://raw.githubusercontent.com/sigstore/root-signing-staging/refs/heads/main/targets/signing_config.v0.2.json` -1. `cosign sign --signing-config signing_config.v0.2.json ${IMAGE_DIGEST}` -1. `cosign verify --certificate-identity=name@example.com --certificate-oidc-issuer=https://accounts.example.com ${IMAGE}` - -* Steps 1-4 configure your local environment to use the staging keys and certificates, along with the service URLs. -* Step 5 specifies the staging environment with flags needed for signing. -* Step 6 specifies the staging environment with flags needed for verifying. +To use this instance, run `cosign initialize --staging`. #### Revert Back to Production -In order to revert, we need to clear the local TUF root data and re-initialize with the default production TUF root data. - -1. `rm -r ~/.sigstore` -1. `cosign initialize` +To revert, run `cosign initialize`.