Integrations

Install github-sts with the official Helm chart

Integrate the github-sts-action in your workflows

Complete walkthrough: Helm + STS + Action + verification

Supported release combinations and known incompatibilities

Prometheus metrics and audit log entries to watch

Minimum cosign and registry versions, with examples for GHCR, Harbor, Nexus, and Artifactory

Let a coding agent write the trust policy, wire the workflow and publish a signed bundle