Revoke a provenance signing key
import requests
url = "https://platform.ankra.app/api/v1/org/provenance/keys/revoke"
payload = { "key_id": "<string>" }
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({key_id: '<string>'})
};
fetch('https://platform.ankra.app/api/v1/org/provenance/keys/revoke', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request POST \
--url https://platform.ankra.app/api/v1/org/provenance/keys/revoke \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"key_id": "<string>"
}
'{
"key_id": "<string>",
"public_key_pem": "<string>",
"generation": 123,
"status": "active",
"revoked_at": "2023-11-07T05:31:56Z"
}Deploy Provenance
Revoke a provenance signing key
Revokes one key generation: nothing it signed verifies from then on, so an enforcing application refuses every image it attested until it is published again. Revoking the active key makes the next attestation create a successor. Revoking a revoked key changes nothing. Recorded in the audit log. Requires security.manage.
POST
/
api
/
v1
/
org
/
provenance
/
keys
/
revoke
Revoke a provenance signing key
import requests
url = "https://platform.ankra.app/api/v1/org/provenance/keys/revoke"
payload = { "key_id": "<string>" }
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({key_id: '<string>'})
};
fetch('https://platform.ankra.app/api/v1/org/provenance/keys/revoke', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request POST \
--url https://platform.ankra.app/api/v1/org/provenance/keys/revoke \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"key_id": "<string>"
}
'{
"key_id": "<string>",
"public_key_pem": "<string>",
"generation": 123,
"status": "active",
"revoked_at": "2023-11-07T05:31:56Z"
}Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.