-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Rebranding to STM
- Loading branch information
Showing
6 changed files
with
469 additions
and
762 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,52 +1,57 @@ | ||
# GPG signing with Secure Software Manager | ||
GPG Signing with Secure Software Manager GitHub action is a streamlined GPG-based signing workflow that improves software security and seamlessly integrates with DevOps processes to sign binaries on **Windows** and **Linux**. | ||
# GPG signing with Software Trust Manager | ||
|
||
GPG Signing with Software Trust Manager GitHub action is a streamlined GPG-based signing workflow that improves software security and seamlessly integrates with DevOps processes to sign binaries on **Windows** and **Linux**. | ||
|
||
This action accelerates the installation and configuration of clients and various signing tools to help developers become signing-ready for GitHub action workflows. | ||
|
||
## Secure Software Manager | ||
DigiCert® Secure Software Manager provides a solution to manage and automate your code signing workflows in a secure way. | ||
## Software Trust Manager | ||
|
||
DigiCert® Software Trust Manager provides a solution to manage and automate your code signing workflows in a secure way. | ||
|
||
**Secure Software Manager:** | ||
- Requires multi-factor authentication (MFA) for signing | ||
- Prevents unauthorized access or misuse of keys and certificates | ||
- Enforces consistency and compliance of security policies | ||
- Guards against insertion of malware during software releases | ||
- Expedites remediation by giving you an audit history of all actions taken within your account | ||
**Software Trust Manager:** | ||
- Requires multi-factor authentication (MFA) for signing. | ||
- Prevents unauthorized access or misuse of keys and certificates. | ||
- Enforces consistency and compliance of security policies. | ||
- Guards against insertion of malware during software releases. | ||
- Expedites remediation by giving you an audit history of all actions taken within your account. | ||
|
||
**You can use Secure Software Manager to securely:** | ||
- Generate and manage your credentials | ||
- Create, edit, import, export, or delete keypairs | ||
- Generate certificates using a keypair in your account | ||
- View your audit and signature logs | ||
- Create releases | ||
- Sign code | ||
**You can use Software Trust Manager to securely:** | ||
- Generate and manage your credentials. | ||
- Create, edit, import, export, or delete keypairs. | ||
- Generate certificates using a keypair in your account. | ||
- View your audit and signature logs. | ||
- Create releases. | ||
- Sign code. | ||
|
||
## DigiCert ONE account | ||
Secure Software Manager is part of the DigiCert ONE platform, which also includes DigiCert® Enterprise PKI Manager, DigiCert® Document Signing Manager, and DigiCert® IoT Device Manager, enabling organizations to manage their diverse PKI workflows from a single pane of glass. | ||
|
||
You require a DigiCert ONE account to access Secure Software Manager. If you do not have a DigiCert ONE account, you can request a 30-day free trial account from [DigiCert Sales](https://www.digicert.com/contact-us). | ||
Software Trust Manager is part of the DigiCert ONE platform, which also includes DigiCert® Trust Lifecycle Manager, DigiCert® Document Trust Manager, and DigiCert® IoT Trust Manager, enabling organizations to manage their diverse PKI workflows from a single pane of glass. | ||
|
||
You require a DigiCert ONE account to access Software Trust Manager. If you do not have a DigiCert ONE account, you can request a 30-day free trial account from [DigiCert Sales.](https://www.digicert.com/contact-us) | ||
|
||
## Use cases | ||
This is a list of popular use cases supported by Secure Software Manager. This is not a comprehensive list. | ||
|
||
This is a list of popular use cases supported by Software Trust Manager. This is not a comprehensive list. | ||
- Container signing | ||
- Debian signing | ||
- Docker signing | ||
- GPG signing | ||
- RPM Signing | ||
|
||
## Signing tools | ||
This is a list of popular signing tools supported by Secure Software Manager. This is not a comprehensive list. | ||
|
||
This is a list of popular signing tools supported by Software Trust Manager. This is not a comprehensive list. | ||
- Rpmsign | ||
- Debsign | ||
- Podman (for container signing) | ||
|
||
## Documentation & Guides | ||
|
||
For comprehensive documentation, refer to: | ||
- [GitHub custom action for GPG signing](https://docs.digicert.com/en/digicert-one/secure-software-manager/ci-cd-integrations/plugins/github-custom-action-for-gpg-keypair-signing.html) | ||
[GitHub custom action for GPG signing](https://docs.digicert.com/en/digicert-one/software-trust-manager/ci-cd-integrations/plugins/github-custom-action-for-gpg-keypair-signing.html) | ||
|
||
## Feedback and issues | ||
[Contact DigiCert](https://www.digicert.com/contact-us) | ||
|
||
## Learn more | ||
To learn more about centralizing and automating your code signing workflows with Secure Software Manager, reach out to [Sales/Enquiry](mailto:[email protected]) or visit: http://www.digicert.com/signing/secure-software-manager. | ||
To learn more about centralizing and automating your code signing workflows with Software Trust Manager, reach out to [Sales/Enquiry](mailto:[email protected]) or visit: https://www.digicert.com/signing/secure-software-manager. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.