Rotate the organisation's provenance signing key
import requests
url = "https://platform.ankra.app/api/v1/org/provenance/keys/rotate"
headers = {"Authorization": "Bearer <token>"}
response = requests.post(url, headers=headers)
print(response.text)const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};
fetch('https://platform.ankra.app/api/v1/org/provenance/keys/rotate', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request POST \
--url https://platform.ankra.app/api/v1/org/provenance/keys/rotate \
--header 'Authorization: Bearer <token>'{
"key_id": "<string>",
"public_key_pem": "<string>",
"generation": 123,
"status": "active",
"revoked_at": "2023-11-07T05:31:56Z"
}Deploy Provenance
Rotate the organisation's provenance signing key
Creates the next key generation, which signs every attestation from then on. Older generations keep verifying what they signed until they are revoked, so images published before the rotation still deploy. Recorded in the audit log. Requires security.manage.
POST
/
api
/
v1
/
org
/
provenance
/
keys
/
rotate
Rotate the organisation's provenance signing key
import requests
url = "https://platform.ankra.app/api/v1/org/provenance/keys/rotate"
headers = {"Authorization": "Bearer <token>"}
response = requests.post(url, headers=headers)
print(response.text)const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};
fetch('https://platform.ankra.app/api/v1/org/provenance/keys/rotate', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request POST \
--url https://platform.ankra.app/api/v1/org/provenance/keys/rotate \
--header 'Authorization: Bearer <token>'{
"key_id": "<string>",
"public_key_pem": "<string>",
"generation": 123,
"status": "active",
"revoked_at": "2023-11-07T05:31:56Z"
}Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.