Signing Identities
All signing identities authorized to sign artifacts on behalf of PatternedDesigns.
Signing identities represent the entities authorized to create cryptographic signatures on behalf of this organization. Each identity is bound to a specific key and defines who or what is permitted to sign.
Human
J.R. Beverly — Release Manager
Activejrbeverly-release-managerHuman signing identity for security advisories and emergency trust disclosures.
CI Pipeline
Gitea Actions — Release Pipeline
Activegitea-actions-release-pipelinePrimary CI identity for versioned release artifact signing.
Automation
Nightly Build Automation
Activenightly-build-automationAutomated signing for nightly snapshot builds and internal test artifacts.
Cloud KMS
AWS KMS — Container Image Signer
Activecloud-kms-container-signerHardware-backed signing identity for container images. Private key never leaves AWS KMS.
Keyless / OIDC
Sigstore Keyless — Gitea Actions CI
Activesigstore-keyless-ciEphemeral OIDC-based signing via Sigstore. No persistent key material.