List the organisation's provenance signing keys
import requests
url = "https://platform.ankra.app/api/v1/org/provenance/keys"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://platform.ankra.app/api/v1/org/provenance/keys', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request GET \
--url https://platform.ankra.app/api/v1/org/provenance/keys \
--header 'Authorization: Bearer <token>'{
"keys": [
{
"key_id": "<string>",
"public_key_pem": "<string>",
"generation": 123,
"status": "active",
"revoked_at": "2023-11-07T05:31:56Z"
}
],
"predicate_type": "<string>"
}Deploy Provenance
List the organisation's provenance signing keys
Every generation of the key the organisation’s pipelines sign provenance with, oldest first: the active one signs, trusted ones still verify, revoked ones verify nothing. The public keys verify an attestation by hand with cosign verify-attestation —type predicate_type. Listing never creates a key. Requires pipelines.read.
GET
/
api
/
v1
/
org
/
provenance
/
keys
List the organisation's provenance signing keys
import requests
url = "https://platform.ankra.app/api/v1/org/provenance/keys"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://platform.ankra.app/api/v1/org/provenance/keys', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request GET \
--url https://platform.ankra.app/api/v1/org/provenance/keys \
--header 'Authorization: Bearer <token>'{
"keys": [
{
"key_id": "<string>",
"public_key_pem": "<string>",
"generation": 123,
"status": "active",
"revoked_at": "2023-11-07T05:31:56Z"
}
],
"predicate_type": "<string>"
}