Skip to content

chore(docs): add ADR proposal for signing and verification of component descriptors#547

Closed
jakobmoellerdev wants to merge 2 commits into
open-component-model:mainfrom
jakobmoellerdev:docs/signing-verification-handler
Closed

chore(docs): add ADR proposal for signing and verification of component descriptors#547
jakobmoellerdev wants to merge 2 commits into
open-component-model:mainfrom
jakobmoellerdev:docs/signing-verification-handler

Conversation

@jakobmoellerdev

Copy link
Copy Markdown
Member

What this PR does / why we need it

Enable easy interpretation of component descriptors in normalized form and provide a consistent experience for signing and verifying component descriptors.

Which issue(s) this PR fixes

fix open-component-model/ocm-project#579

@github-actions github-actions Bot added area/documentation Documentation related size/m Medium labels Aug 13, 2025
@jakobmoellerdev jakobmoellerdev force-pushed the docs/signing-verification-handler branch 2 times, most recently from 8284c54 to ce6c430 Compare August 13, 2025 09:45
@github-actions github-actions Bot added the component/github-actions Changes on GitHub Actions or within `.github/` directory label Aug 13, 2025
@jakobmoellerdev jakobmoellerdev force-pushed the docs/signing-verification-handler branch from ce6c430 to a5a06dc Compare August 13, 2025 09:47
…criptors

Signed-off-by: Jakob Möller <jakob.moeller@sap.com>
@jakobmoellerdev jakobmoellerdev force-pushed the docs/signing-verification-handler branch from a5a06dc to 889594b Compare August 13, 2025 09:48
@jakobmoellerdev jakobmoellerdev changed the title docs(adr): add proposal for signing and verification of component descriptors chore(docs): add ADR proposal for signing and verification of component descriptors Aug 13, 2025
@github-actions github-actions Bot added the kind/chore chore, maintenance, etc. label Aug 13, 2025
@jakobmoellerdev jakobmoellerdev marked this pull request as ready for review August 13, 2025 09:50
@jakobmoellerdev jakobmoellerdev requested a review from a team as a code owner August 13, 2025 09:50

@matthiasbruns matthiasbruns left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

my 2 cents for the wording in the ADR

Comment thread docs/adr/0008_signing_verification.md Outdated
Comment thread docs/adr/0008_signing_verification.md Outdated
Comment thread docs/adr/0008_signing_verification.md Outdated
Comment thread docs/adr/0008_signing_verification.md Outdated
Comment thread docs/adr/0008_signing_verification.md Outdated
Comment thread docs/adr/0008_signing_verification.md Outdated
Comment thread docs/adr/0008_signing_verification.md Outdated
Co-authored-by: Matthias Bruns <github@matthiasbruns.com>
Signed-off-by: Jakob Möller <jakob.moeller@sap.com>
@fabianburth

Copy link
Copy Markdown
Contributor

This PR currently lacks the outcomes from our discussion last weeks, right?

@jakobmoellerdev

jakobmoellerdev commented Aug 18, 2025

Copy link
Copy Markdown
Member Author

yes I am currently working on the OCI transformers and will circle back here once I have that PR ready

Edit: @matthiasbruns will take over the ADR design to accomodate him getting to know OCM signing better

@matthiasbruns

Copy link
Copy Markdown
Contributor

taking over in my branch
#599

jakobmoellerdev added a commit that referenced this pull request Sep 5, 2025
…nt descriptors (#767)

Continuation of
#547
and #599

<!-- markdownlint-disable MD041 -->
#### What this PR does / why we need it

Enable easy interpretation of component descriptors in normalized form
and provide a consistent experience for signing and verifying component
descriptors.

#### Which issue(s) this PR fixes
<!--
Usage: `Fixes #<issue number>`, or `Fixes (paste link of issue)`.
-->

fix open-component-model/ocm-project#579

---------

Signed-off-by: Jakob Möller <jakob.moeller@sap.com>
Co-authored-by: Matthias Bruns <github@matthiasbruns.com>
Co-authored-by: Fabian Burth <fabian.burth@sap.com>
Co-authored-by: Gergely Brautigam <gergely.brautigam@sap.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/documentation Documentation related component/github-actions Changes on GitHub Actions or within `.github/` directory kind/chore chore, maintenance, etc. size/m Medium

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Create ADR for OCM Signing/Verification Handler Plugins

3 participants