Verification Keys

Use these public keys to verify Stella Ops Suite:

  • Container images (Cosign)
  • Offline Update Kits + signed manifests (Cosign verify-blob)
  • Security mail / advisories (PGP)

Verify a container image

cosign verify \
  --key https://stella-ops.org/keys/cosign.pub \
  registry.stella-ops.org/stella-ops/stella-ops:<VERSION>

Verify an Offline Kit tarball + manifest

cosign verify-blob \
  --key https://stella-ops.org/keys/cosign.pub \
  --signature stella-ops-offline-kit-<DATE>.tgz.sig \
  stella-ops-offline-kit-<DATE>.tgz

cosign verify-blob \
  --key https://stella-ops.org/keys/cosign.pub \
  --signature offline-manifest-<DATE>.json.jws \
  offline-manifest-<DATE>.json

Import PGP key

curl -sSL https://stella-ops.org/keys/pgp.asc | gpg --import
gpg --fingerprint "Stella Ops Release Signing"

If a message or advisory is not verifiably signed, treat it as untrusted.

PGP Key

9BCF 5D1D 6EA9 8F99 24F4 6071 B618 ABAF 7D23 C65D 7A86 77E8 2DE3 7815 6126 F723
Show full key…

Raw download: pgp.asc

Copied to clipboard 
-----BEGIN PGP PUBLIC KEY BLOCK-----



mQINBGiJPE8BEAC9kMGRGzLzxI2orkt5W3CDNLui07er6yk0xW3hXDol8Q6l913

BwNrCiUySNmMivvONv3kIVhoiAUbYaLOevjs0CFw1INKfNW1dECjDSYgeSpVq0rr

NtSinx6BdLaN5dpVc9Rmj7FMsBqbugnOATwCNEzflRoDfQC7Cm1wXp9ovZ1QGW

LJ1GFeBqtX2Hv4ovBHrzhExOjj9RT4EJ1SDHQ7prgUtwMYdQ2Kdb52KFdoB91V

2x7kJp2FnQskbQrXYFZ1hZQ4gBaPiweu9k8Ltef1KlDhY1IvhvzP3QakHTsb76z

Gtxq38OFm8jbiiDG2xA1fiDDSSzVuWGfuFe3MkrmMAB2B5ucI4ZrmFpvjQJo9

0QX9NXREcjXZZlUz4l28P9ALTU65cDjv7h7a9GjcMjQvId1y0Qz80QormKgDxk

dnGBD7rmOpcwf4ZvbJW0tU1B44mfas4z0nUbFP3iP2zPWCsqmO7OItt0W7cGQ3u

ATpZnIzJAW666BCDiknJ7WOssOw6WY8IHSzRdNZGaIaEQ78mQBscDqc96HRG36Oe

kCtwwyQZ60jErgFktdMy4zVVwo4Zv8aH6nKPASCd3GhJyfPAX66sUeFJzrQBjTQE

gjz3jdgKlmSjvoDSPLCLpQMEQ0befgxYAA7NNO0b66nQrj1cS0L9jdv0wARAQAB

tDNTdGVsbGEgT3BzIFJlbGVhc2UgU2lnbmluZyA8cmVsZWFzZUBzdGVsbGEtb3Bz

Lm9yZz6JAlcEEwEIAEEWIQQaBFJYMHGUiBUn0v4JXFgJxj26ZQUCaIk8TwIbAwUJ

AAFRgAULCQgHAgIiAgYVCgkICwIEFgIDAQIeBwIXgAAKCRAJXFgJxj26ZbED9o

r0hL3OCGAuv9K5oh93SovmPSUDVFHFkQbzc4bo1YTgEydZMqThk4NPtOi3eF

mEe1p06UPl1YmkAPONPfIJWvSCioQn95V91Nt0MfRBroSkhTf4Y4VDwci4xDvJ

chcZtAFWau866XEMzWIEyayVvpQZgM12iGr6rFmxWJopPyQYgCwL3h9VAdAdT

6qDh1LhG8WU7SQXK8rXwvQW8054yDxQKFzYtpS8arQLNdfA0NzOSIAW8kocceK

D6GC0F0AZ9QdnRLixeORRd8yPIPFr6Dv6QaIFTD08WHP346IeK3KoG0RVCSfCerL

SjNIeIZYkf8fd9stvQumX97iSWezF1AVWCyR9SVYyvz67HoL3S4Kkrv9jcnWDXX

3pLqajEeoYyFpvwSV4itAULAEtZSdrWrDLM84nWU8o3UcVomJnyxN1keBkVMUOe

1UMkRhukxlJ4tCfDFWyQHRhQTzWnha5rdxZp1iHxaqhjd3ItHcnHcIjlXrMuXb

aVMourL28CP71A0QbTVxpOXypjkK4WEHZhMrDiJBofEtC4F0P5406yWxwBiIG8u

BuKoMsnSO1C7M1ddUXEywlJsIxL2G9NssQPgetKpCqTWvAUZ9rym54C9y51

YUhuFh9mcIvIL79igPlBeXPFoYAm5jzDCOLc0TyLkCDQRoiTxPARAA1CuxFRzh

xwvlyDxvJunKdp1GXYEVq1R02l1kQTAsfroAATOIWu3PDXzekjVBUwzqu7ElO

2td8w1IqL71yOgeYFS4nKqumoZwqDqbWaveE9ZVjWbVEfCmX6MWsKUkoE2cmB

wx2lS25MRBgkmviewXAwEbkfPCddZxPteKEStv2VKl8DLv4kBgg01ev0WCx3

Ei4svxdS40DfohYf61FfiKbcW5zLGMqpxk48wr1s74kiWpRt5sAjuZycKbm9f

jGtdDfUJ4QRcE27x31IPPeNJlhyNVJJBiCjV8tB4FZ90GxrqPvIlT3YUH0p5

H8A5mG7ilbFWoUtaXJ9nmjzGeRsKHLh2fEj7WUIoCRNeUJYKa5GzdZKVU1b3r2

lMy5JrlF9rH4soEL0gSxFcEISmBIt99dN9ZgZcBk77A09A6jruw5NkVdp1szB

BVbfBgRHR8ylvImayT5ZwAcYJ57ZCKxOgNPdXdTwycqBBbg3Bv24gRy3zqR1

HSrQF1YBXuv1kzxtxiED2ltJyjsvAd9MX23KLb0oV0g855kILnJzpRII8fg9P

pEEcb7K3M5aftB5CIHFUnniOqLoEVRHYYKLc7cDlhicrLsu20k23tSp7DMf98

ELn8JCwqE68li7QWdYlvFQtqvpNTl74F6ucAEQEAAYkCPAQYAQgAJhYhBBoEUlgw

cZSIFSfSglcWAnGPbplBQJoiTxPAhsMBQkAAVGAAAoJEAlcWAnGPbplQWsPirz

f6113Q8I9QEyQJyz9UNTRhO8e1cpMJcwpf1xobTZcyTbtLMrNOEDe4FROVJ0yyjh

xGyTo9PLQ6Iie1KaTtIe9AcdNPy0h5X8Yn5nOQWXqz6X7GsCMovTNrEYs4bGDs

a2K5EMaDMdDv1auImf4AqblgikFB6smIPPQ0rV1GmTHxhRbr8YLukhNshoAO

CI2NScSCsQoSwdRIxobtDjCv3oodTA44CMBqtk8TadeYNa8TUvcz8t8TmBx0

2zbGuBk6c7UejMFjFgNrr681zj4B8woevmTUr9i9hGq0eFG5KEz7Cj7agE5S

FprJeY7rv8Hh98vwL4FpBRz18DzsX4jloEaBD6xmpe6n1GUV4iOlENr0Fyr0W6

Nl4ywu2E8YkpEt0YPO2I4GwRZ4bdMRpViOtAWBmWqTSyibNsWu1mds6MKKXdkY

61wfOADWJ07HFiylfMtfF8Y4Zqy1O6CihrK3f7h67qy0tazY4KjE1rxqIzwWFs5

OG1rqeXB2S8GCSgbsYYjMgBUsjylv6LXEo9SmMqrqGvD8qK06DrWtFEt8fwJ8

3TGL1HNzZNdFIyhvhVAh4E13YemKzbHTuPCxhcYzRIGxJktqRIVoeuL76HVcN

E9ZTgO424UIawsWZJuegKyU4whZ3zLu87r3kPZ

9Aft

-----END PGP PUBLIC KEY BLOCK-----

CoSign Key

50DA 0ECE C6C2 B426 D4A7 0925 82DE 1B14 ACFD 63BE 1A33 8E7F F844 D048 2EC4 F779
Show full key…

Raw download: cosign.pub

Copied to clipboard 
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAETOSsZvhSGySCZVR60DAeE0tejxI
W3MTHGA3qYko4nm8T4VEtbfGyhAkMTer2rMUcUUcZDQ0vEbYP7W7Wiegg
-----END PUBLIC KEY-----