Artifact Signing
Managed code and artifact signing with zero-touch certificate lifecycle in FIPS 140-3 Level 3 HSMs.
- Provider
- azure
- Kind
- Key management
- Category
- Security
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| certificateProfileType | enum | public-trust | public-trust-test | private-trust | private-trust-ci-policy | vbs-enclave | no | — | inherited |
| contentConfidentialSigning | boolean | — | no | true | inherited |
| envelopeEncryption | boolean | — | no | false | inherited |
| hsm | boolean | — | no | false | ▸ true |
| identityValidationRequired | boolean | — | no | true | inherited |
| managed | boolean | — | no | true | ▸ true |
| rotationAutomated | boolean | — | no | false | ▸ true |
| rotationDays | integer | — | no | — | inherited |
| sku | enum | basic | premium | no | basic | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "artifact-signing", component: "azure-artifact-signing" }Certificate Management Servicealibaba-certificate-managementData Encryption Servicealibaba-data-encryption-serviceAWS Certificate Manageraws-acmAWS KMSaws-kmsAWS Payment Cryptographyaws-payment-cryptographyAWS Private Certificate Authorityaws-private-caAWS Secrets Manageraws-secrets-managerAWS Signeraws-signerAWS Systems Manager Parameter Storeaws-ssm-parameter-storeAWS CloudHSMcloudhsmAzure Cloud HSMazure-cloud-hsmAzure Dedicated HSMazure-dedicated-hsmAzure Key Vaultazure-key-vaultAzure Key Vault Managed HSMazure-managed-hsmAdvanced Certificate Managercloudflare-advanced-certificate-managerCloudflare Geo Key Managercloudflare-geo-key-managerCloudflare Keyless SSLcloudflare-keyless-sslCloudflare mTLS client certificatescloudflare-mtlsCloudflare Origin CAcloudflare-origin-caCloudflare Secrets Storecloudflare-secrets-storeCloudflare Universal SSLcloudflare-ssl-tlsBitwardenbitwardencert-managercert-managerCyberArk ConjurconjurDopplerdopplerEJBCAejbcaEntrust nShield HSMentrust-nshieldHashiCorp Vaulthashicorp-vaultHCP Vault Dedicatedhcp-vaultInfisicalinfisicalGeneric key managementkey-management1Password Connectonepassword-connectOpenBaoopenbaoSealed Secretssealed-secretsSmallstep step-castep-caThales Luna HSMthales-luna-hsmCertificate Authority Servicegoogle-certificate-authority-serviceCertificate Managergoogle-certificate-managerCloud External Key Managergoogle-cloud-ekmCloud HSMgoogle-cloud-hsm
and 13 more → Key management page# yaml-language-server: $schema=../../schema/component.schema.json # Artifact Signing (formerly Trusted Signing): fully managed code and artifact signing with # zero-touch certificate lifecycle management inside FIPS 140-3 Level 3 HSMs, and digest signing # that keeps the file on the caller's endpoint ("What is Artifact Signing?"). Accounts default # to the Basic SKU ("Quickstart: Set up Artifact Signing"). schemaVersion: "1" type: "component" id: "azure-artifact-signing" kind: "key-management" provider: "azure" docs: "https://learn.microsoft.com/en-us/azure/artifact-signing/overview" defaults: managed: true hsm: true rotationAutomated: true properties: sku: type: "enum" values: ["basic", "premium"] default: "basic" certificateProfileType: type: "enum" values: ["public-trust", "public-trust-test", "private-trust", "private-trust-ci-policy", "vbs-enclave"] contentConfidentialSigning: type: "boolean" default: true identityValidationRequired: type: "boolean" default: true