From 576a0a27ddaa1564ea1f5a54455fb9d3a6325959 Mon Sep 17 00:00:00 2001 From: Patrick Date: Wed, 29 Apr 2026 21:58:02 +0000 Subject: [PATCH] Update README.md --- README.md | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index f7809f3..cf1884b 100644 --- a/README.md +++ b/README.md @@ -2,11 +2,17 @@ Call Theory public keys for verification of signed containers from our container registery. +## Call Theory SSH Public Key + +- [calltheory.pub](calltheory.pub) + +> Add to your `authorized_keys` file for the + ## Verifying Calltheory container images All images published to `cr.calltheory.com/orbital/*` are signed with Cosign. -## Install cosign +### Install cosign ```bash curl -sSL -o /usr/local/bin/cosign \ @@ -14,19 +20,19 @@ curl -sSL -o /usr/local/bin/cosign \ chmod +x /usr/local/bin/cosign ``` -## Get the public key +### Get the public key ```bash curl -O https://git.calltheory.com/calltheory/public-keys/raw/branch/main/keys/cosign.pub ``` -## Verify an image +### Verify an image ```bash cosign verify --key cosign.pub cr.calltheory.com/orbital/smoketest@sha256:abc123... ``` -## Verify in Kubernetes +### Verify in Kubernetes For automated verification, install *Sigstore Policy Controller* or similar admission controller and configure it to trust this key for