From 91c77170e985a54e89600d00976d371b6a3fe9aa Mon Sep 17 00:00:00 2001
From: Carlos Tadeu Panato Junior <ctadeu@gmail.com>
Date: Wed, 11 Sep 2024 16:04:56 +0200
Subject: [PATCH] add chainguard source (#169)

---
 .chainguard/source.yaml | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 .chainguard/source.yaml

diff --git a/.chainguard/source.yaml b/.chainguard/source.yaml
new file mode 100644
index 0000000..98f2663
--- /dev/null
+++ b/.chainguard/source.yaml
@@ -0,0 +1,13 @@
+# Copyright 2024 Chainguard, Inc.
+# SPDX-License-Identifier: Apache-2.0
+
+spec:
+  authorities:
+    - keyless:
+        # allow commits signed by users using GitHub or Google OIDC
+        identities:
+          - issuer: https://accounts.google.com
+          - issuer: https://github.com/login/oauth
+    - key:
+        # allow commits signed by GitHub, e.g. the UI
+        kms: https://github.com/web-flow.gpg