From 12497d394db4c0c8cca60b123b6e911f1316035e Mon Sep 17 00:00:00 2001 From: ER Date: Mon, 3 Apr 2023 17:44:23 +0300 Subject: [PATCH] docs: simplify redundant signing info --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 0278e32..4b0aec3 100644 --- a/README.md +++ b/README.md @@ -68,4 +68,4 @@ These images are signed with sisgstore's [cosign](https://docs.sigstore.dev/cosi cosign verify --key cosign.pub ghcr.io/ublue-os/base -If you're forking this repo you should [read the docs](https://docs.github.com/en/actions/security-guides/encrypted-secrets) on keeping secrets in github. You need to [generate a new keypair](https://docs.sigstore.dev/cosign/overview/) with cosign. The public key can be in your public repo (your users need it to check the signatures), and you can paste the private key in Settings -> Secrets -> Actions. +If you're forking this repo, the uBlue website has [instructions](https://ublue.it/making-your-own/) for setting up signing properly.