此内容没有您所选择的语言版本。
Chapter 1. Introduction
Red Hat’s Trusted Artifact Signer (RHTAS) service enhances software supply chain security by simplifying cryptographic signing and verifying of software artifacts, such as container images, binaries, and Git commits. Trusted Artifact Signer provides a production ready deployment of the SecureSign community project.
The Trusted Artifact Signer software Release Notes documents new features and enhancements, bug fixes, and known issues for the latest version, 1.4. We add the newest items to the top in each chapter, as we build upon the official release notes over the lifecycle of the major, and minor releases.
- New for this release
- Generally Available : The ability to configure the RHTAS services for high-availability environments.
- Generally Available : Implementation of the Sigstore Policy Controller admission controller for Red Hat OpenShift Container Platform.
- Generally Available : Support for using a PostgreSQL database for Trillian.
- Technology Preview : Signing and verifying AI/ML models.
- Technology Preview : RHTAS Console, a web-based user interface where users can search the transparency log, and view signing events.
- Technology Preview : Key Management Service (KMS) support for managing Rekor signing keys.
-
New
cosignversion 3.0.4, helping to streamline the initialization process. - Various Conforma improvements and fixes.