Red Hat Trusted Artifact Signer Console is now generally available

With this update, the Red Hat Trusted Artifact Signer Console is now generally available. It replaces the legacy Rekor Search UI. Console is a new custom resource (CR) managed by the RHTAS operator, deployed independently from the Securesign CR. The Red Hat Trusted Artifact Signer Console provides a centralized, visual way to monitor certificate health, browse signing activity, or verify artifacts.

tufcli replaces tuftool for TUF repository management in Red Hat Trusted Artifact Signer

Copy link

With this update, tufcli, a Go-based CLI and library built on go-tuf, replaces the legacy Rust-based tuftool to power The Update Framework (TUF) repository management in Red Hat Trusted Artifact Signer (RHTAS). Native Go implementation aligns the TUF tooling with the RHTAS stack, enables direct programmatic integration, and provides a foundation for future post-quantum cryptographic algorithm support.

TUF metadata created with tufcli is fully compatible with existing RHTAS infrastructure. No changes are required to deployed TUF servers or Sigstore clients.

tufcli supports production-grade signing backends and cryptographic options

Copy link

With this update, tufcli supports production-grade signing backends and cryptographic options for secure The Update Framework (TUF) repository maintenance and upgrade workflows. Tufcli expands beyond the plaintext file-based keys of the legacy tuftool utility and provides flexible signing mechanisms to accommodate various organizational security postures.

Red Hat Trusted Artifact Signer simplifies CLI binary distribution

Copy link

With this update, Red Hat Trusted Artifact Signer (RHTAS) eliminates the in-cluster CLI server component to simplify the deployment footprint. You can download client binaries from the following channels:

• Red Hat Developers Portal: Download binaries directly from the RHTAS download page.
• OpenShift Web Console: Download binaries under the Command Line Tools section in the console.

Operator metrics endpoint supports authentication and authorization

Copy link

With this update, the Operator metrics endpoint requires authentication and authorization to prevent unauthorized access. Only authorized clients can access Operator metrics. On Red Hat OpenShift, OpenShift Lifecycle Manager (OLM) configures these access controls automatically, requiring no user action.

Red Hat Trusted Artifact Signer supports external KMS key delegation for Fulcio

Copy link

With this update, Red Hat Trusted Artifact Signer supports configuring the Fulcio certificate authority (CA) to delegate its private signing key to an external Key Management Service (KMS). Supported KMS providers include AWS KMS, Google Cloud KMS, Azure Key Vault, HashiCorp Vault, and OpenBao.

Previously, administrators could protect Fulcio’s CA private key only by storing it in a Kubernetes Secret object. Customers who managed signing keys in a cloud or enterprise KMS could not reuse that infrastructure for Fulcio. With this enhancement, administrators can configure Fulcio to sign with a key held in an external KMS, ensuring that the CA private key never resides in the cluster. Because the KMS holds only the private key, the CA certificate chain is supplied separately. Existing file-based signing deployments remain unaffected because file-based signing continues to be the default signer type.

Cryptographic signing of ML models available with model-transparency-go

Copy link

Red Hat Trusted Artifact Signer now includes model-transparency-go, a Go CLI and library for cryptographic signing and verification of machine learning (ML) models. Deploying unsigned ML models can create a trust gap in the model supply chain because there is no way to verify that a model deployed to production is the same model that was trained and tested. model-transparency-go helps close this gap by providing cryptographic signing and verification for ML models.

With this update, model-transparency-go closes this trust gap by supporting keyless signing with Sigstore, PKI key pairs, X.509 certificate chains, and PKCS#11/HSM hardware tokens. RFC 3161 timestamp authority integration ensures signatures remain verifiable beyond short-lived certificate lifetimes. Additionally, model-transparency-go connects with on-premises Trusted Artifact Signer instances via TUF-based trust root configuration, accepts structured input via the --json flag for CI/CD automation, produces Sigstore bundles compatible with Python model-signing tools, and conforms to the Open Model Signing (OMS) specification v1.0.

Validate input command now supports a persistent HTTP server flag

Copy link

With this update, a --server flag is added to the ec validate input command, which starts a persistent HTTP service that exposes policy evaluation over REST. The server produces the same evaluation results as the single-use CLI mode but over HTTP. This enables external consumers, such as Trusted Profile Analyzer (TPA), CI/CD platforms, and security dashboards, to evaluate policies programmatically.

Option to skip attestation signature verification added for debugging in ec validate

Copy link

With this update, an option to skip attestation signature verification is added to Enterprise Contract policy validation. This enables users and support teams to troubleshoot policy violations and debug real-world issues without requiring the public key

Enterprise Contract policy evaluation now supports Sigstore bundle attestations stored as OCI referrers

Copy link

With this update, the ec.sigstore.verify_attestation function supports Sigstore bundles stored as Open Container Initiative (OCI) referrers by adding a new_bundle_format option. This enables verification of attestations created by tasks using Cosign's --new-bundle-format flag. When new_bundle_format is set to true, the function queries the OCI Referrers API for Sigstore bundles. By default, new_bundle_format is set to false, which maintains backward compatibility by querying the legacy .att tag.

Conforma policy evaluation now caches parsed OCI blobs to improve evaluation performance

Copy link

With this update, the Open Policy Agent (OPA) policy evaluator includes a custom ec.oci.parsed_blob builtin function that caches parsed JSON Abstract Syntax Tree (AST) results for Open Container Initiative (OCI) blobs. For policies using this builtin, Conforma reuses parsed data structures across policy evaluations within a component validation, eliminating redundant parsing of Software Bill of Materials (SBOM) data and image configurations. This enhancement significantly reduces memory allocation and improves overall policy evaluation execution speed.

Enterprise Contract CLI adds builtin function for OCI referrers

Copy link

With this update, the Enterprise Contract command-line interface (CLI) includes the ec.oci.image_referrers builtin function, enabled by an upgrade to Cosign version 3. This function allows policy authors to retrieve a list of artifacts attached to a container image through the Open Container Initiative (OCI) Referrers API during policy evaluation.