Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Support for OpenTofu Provider Signing Key #158

Open
douglasflagg opened this issue Jan 7, 2025 · 0 comments
Open

Add Support for OpenTofu Provider Signing Key #158

douglasflagg opened this issue Jan 7, 2025 · 0 comments
Labels
enhancement New feature or request

Comments

@douglasflagg
Copy link

douglasflagg commented Jan 7, 2025

BUSINESS PROBLEM

Currently there is no signing key configured for the Venafi provider on the OpenTofu registry so users see a warning like this when downloading the provider through the OpenTofu registry (when running 'tofu init').

[WARN]  Skipping GPG validation of provider package /var/folders/... as no keys were provided by the registry. See https://github.com/opentofu/opentofu/pull/309 for more information.
- Installed venafi/venafi v0.21.1. Signature validation was skipped due to the registry not containing GPG keys for this provider
╵

PROPOSED SOLUTION

Please add the Provider Signing Key for the Venafi provider to the OpenTofu Registry. Here are the steps.

CURRENT ALTERNATIVES

Not certain there are others save for not supporting signing keys for OpenTofu.

VENAFI EXPERIENCE

I have been using Venafi since 2022 and use it at almost every week.

@douglasflagg douglasflagg added the enhancement New feature or request label Jan 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant