From b7acf13e1b5c721d572249eca7fdbf7da11b9e3d Mon Sep 17 00:00:00 2001 From: Gerrit Date: Wed, 13 May 2026 11:53:46 +0200 Subject: [PATCH] Forgot to push OCI artifact link not working. --- docs/06-For CISOs/Security/05-artifacts-signing.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/06-For CISOs/Security/05-artifacts-signing.md b/docs/06-For CISOs/Security/05-artifacts-signing.md index 833d5c8..2e809c5 100644 --- a/docs/06-For CISOs/Security/05-artifacts-signing.md +++ b/docs/06-For CISOs/Security/05-artifacts-signing.md @@ -8,7 +8,7 @@ sidebar_position: 5 To increase trust and integrity, metal-stack introduces artifact signing for its released components. -The release vector is published as an [OCI artifact](/community/06-oci-artifacts.md) and signed using [cosign](https://github.com/sigstore/cosign). +The release vector is published as an OCI artifact and signed using [cosign](https://github.com/sigstore/cosign). The images are signed using a public key that is always attached to a metal-stack release in the [releases repository](https://github.com/metal-stack/releases/blob/master/cosign.pub).