helm repo add crabka https://robot-head.github.io/crabka/charts helm repo update
Repository index: index.yaml
Charts (version 0.4.0):
Signing key: crabka-charts.pub.asc
# PGP provenance (helm-native) curl -fsSL https://robot-head.github.io/crabka/charts/crabka-charts.pub.asc | gpg --dearmor > crabka-keyring.gpg helm install my-op crabka/crabka-operator --verify --keyring ./crabka-keyring.gpg # Keyless cosign signature cosign verify-blob --bundle crabka-operator-VERSION.tgz.cosign.bundle \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ --certificate-identity-regexp '^https://github.com/robot-head/crabka/' \ crabka-operator-VERSION.tgz # SLSA build provenance gh attestation verify crabka-operator-VERSION.tgz --repo robot-head/crabka