Sigstore’s Fulcio certificate authority now recognizes CircleCI’s OIDC tokens. This means you can sign container images and other artifacts directly from your CircleCI pipelines—without managing long-lived signing keys.
Sigstore’s Fulcio certificate authority now recognizes CircleCI’s OIDC tokens. This means you can sign container images and other artifacts directly from your CircleCI pipelines—without managing long-lived signing keys.