# Copyright 2023 Chainguard, Inc.
# SPDX-License-Identifier: Apache-2.0

spec:
  authorities:
    - keyless: {}
    - key:
        # Allow commits signed by GitHub.
        kms: https://github.com/web-flow.gpg
