Skip to content

Commit

Permalink
Rebranding to STM
Browse files Browse the repository at this point in the history
Rebranding to STM
  • Loading branch information
akashdigicert authored Feb 10, 2023
2 parents 904746d + e95438c commit 37c73cb
Show file tree
Hide file tree
Showing 6 changed files with 469 additions and 762 deletions.
6 changes: 3 additions & 3 deletions .github/workflows/npm-publish.yml
Original file line number Diff line number Diff line change
Expand Up @@ -18,16 +18,16 @@ jobs:
- uses: actions/setup-node@v3
with:
node-version: 16
- name: Install Secure Software Manager client tools
id: SSMClientToolsSetup
- name: Install Software Trust Manager client tools
id: STMClientToolsSetup
run: |
npm ci
npm run build
npm start
- name: Verify installation
run: |
cd "${{ steps.SSMClientToolsSetup.outputs.extractPath }}"
cd "${{ steps.STMClientToolsSetup.outputs.extractPath }}"
echo "Tools installed are ..."
ls
Expand Down
51 changes: 28 additions & 23 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,52 +1,57 @@
# GPG signing with Secure Software Manager
GPG Signing with Secure Software Manager GitHub action is a streamlined GPG-based signing workflow that improves software security and seamlessly integrates with DevOps processes to sign binaries on **Windows** and **Linux**.
# GPG signing with Software Trust Manager

GPG Signing with Software Trust Manager GitHub action is a streamlined GPG-based signing workflow that improves software security and seamlessly integrates with DevOps processes to sign binaries on **Windows** and **Linux**.

This action accelerates the installation and configuration of clients and various signing tools to help developers become signing-ready for GitHub action workflows.

## Secure Software Manager
DigiCert® Secure Software Manager provides a solution to manage and automate your code signing workflows in a secure way.
## Software Trust Manager

DigiCert® Software Trust Manager provides a solution to manage and automate your code signing workflows in a secure way.

**Secure Software Manager:**
- Requires multi-factor authentication (MFA) for signing
- Prevents unauthorized access or misuse of keys and certificates
- Enforces consistency and compliance of security policies
- Guards against insertion of malware during software releases
- Expedites remediation by giving you an audit history of all actions taken within your account
**Software Trust Manager:**
- Requires multi-factor authentication (MFA) for signing.
- Prevents unauthorized access or misuse of keys and certificates.
- Enforces consistency and compliance of security policies.
- Guards against insertion of malware during software releases.
- Expedites remediation by giving you an audit history of all actions taken within your account.

**You can use Secure Software Manager to securely:**
- Generate and manage your credentials
- Create, edit, import, export, or delete keypairs
- Generate certificates using a keypair in your account
- View your audit and signature logs
- Create releases
- Sign code
**You can use Software Trust Manager to securely:**
- Generate and manage your credentials.
- Create, edit, import, export, or delete keypairs.
- Generate certificates using a keypair in your account.
- View your audit and signature logs.
- Create releases.
- Sign code.

## DigiCert ONE account
Secure Software Manager is part of the DigiCert ONE platform, which also includes DigiCert® Enterprise PKI Manager, DigiCert® Document Signing Manager, and DigiCert® IoT Device Manager, enabling organizations to manage their diverse PKI workflows from a single pane of glass.

You require a DigiCert ONE account to access Secure Software Manager. If you do not have a DigiCert ONE account, you can request a 30-day free trial account from [DigiCert Sales](https://www.digicert.com/contact-us).
Software Trust Manager is part of the DigiCert ONE platform, which also includes DigiCert® Trust Lifecycle Manager, DigiCert® Document Trust Manager, and DigiCert® IoT Trust Manager, enabling organizations to manage their diverse PKI workflows from a single pane of glass.

You require a DigiCert ONE account to access Software Trust Manager. If you do not have a DigiCert ONE account, you can request a 30-day free trial account from [DigiCert Sales.](https://www.digicert.com/contact-us)

## Use cases
This is a list of popular use cases supported by Secure Software Manager. This is not a comprehensive list.

This is a list of popular use cases supported by Software Trust Manager. This is not a comprehensive list.
- Container signing
- Debian signing
- Docker signing
- GPG signing
- RPM Signing

## Signing tools
This is a list of popular signing tools supported by Secure Software Manager. This is not a comprehensive list.

This is a list of popular signing tools supported by Software Trust Manager. This is not a comprehensive list.
- Rpmsign
- Debsign
- Podman (for container signing)

## Documentation & Guides

For comprehensive documentation, refer to:
- [GitHub custom action for GPG signing](https://docs.digicert.com/en/digicert-one/secure-software-manager/ci-cd-integrations/plugins/github-custom-action-for-gpg-keypair-signing.html)
[GitHub custom action for GPG signing](https://docs.digicert.com/en/digicert-one/software-trust-manager/ci-cd-integrations/plugins/github-custom-action-for-gpg-keypair-signing.html)

## Feedback and issues
[Contact DigiCert](https://www.digicert.com/contact-us)

## Learn more
To learn more about centralizing and automating your code signing workflows with Secure Software Manager, reach out to [Sales/Enquiry](mailto:[email protected]) or visit: http://www.digicert.com/signing/secure-software-manager.
To learn more about centralizing and automating your code signing workflows with Software Trust Manager, reach out to [Sales/Enquiry](mailto:[email protected]) or visit: https://www.digicert.com/signing/secure-software-manager.
2 changes: 1 addition & 1 deletion action.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
name: "GPG Signing with Secure Software Manager"
name: "GPG signing with Software Trust Manager"
description: "GPG signing automation with private key protection and multi-factor authentication (MFA)"
runs:
using: "node16"
Expand Down
Loading

0 comments on commit 37c73cb

Please sign in to comment.