From c11e3ff599358ad443e32b1932da685d29a266cf Mon Sep 17 00:00:00 2001
From: Carlos Tadeu Panato Junior <ctadeu@gmail.com>
Date: Mon, 11 Sep 2023 09:40:33 +0200
Subject: [PATCH] add chainguard source (#26)

---
 .chainguard/source.yaml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 .chainguard/source.yaml

diff --git a/.chainguard/source.yaml b/.chainguard/source.yaml
new file mode 100644
index 0000000..480421e
--- /dev/null
+++ b/.chainguard/source.yaml
@@ -0,0 +1,15 @@
+# Copyright 2023 Chainguard, Inc
+# SPDX-License-Identifier: Apache-2.0
+
+spec:
+  authorities:
+  - keyless:
+      url: https://fulcio.sigstore.dev
+      identities:
+      - subjectRegExp: .+@chainguard.dev$
+        issuer: https://accounts.google.com
+    ctlog:
+      url: https://rekor.sigstore.dev
+  - key:
+      # Allow commits signed by Github (merge commits)
+      kms: https://github.com/web-flow.gpg