Certificate-Based Artifact Signing Pipeline
Certificate-Based Artifact Signing Pipeline: a task in openthoughts-tblite-dev-apptainer-v1: OpenThoughts-TBLite dev (offline Apptainer, v1) (Harbor dataset). You are tasked with implementing a secure software artifact signing pipeline using OpenSSL and X.509 certificates . This simulates a…
The task
You are tasked with implementing a secure software artifact signing pipeline using **OpenSSL** and **X.509 certificates**. This simulates a "keyless-style" workflow where ephemeral keys are generated for each signing operation and immediately destroyed, while certificates/public keys are preserved for verification.