ctrlplane / ctrlplane/copilot

Attestation Proxy Client

Open
#9 0 comments 0 reactions 0 assignees View on GitHub
enhancement help wanted
Dominant language
Java
Stars
1
Forks
1
PR merge metrics
No merged PRs in 30d

Description

Create attestation proxy client for copilot.

The attestation proxy will be an optional copilot integration, and likely a completely separate application. Copilot will leverage a REST client in order to query an attestation proxy based on a predefined behavior. Copilot will not need to know how each attestation service works, which will simplify the integration.

Some pilot agents will be deployed in environments where users wish to leverage local platform attestation services such as [KeyLime](https://keylime.dev/). Copilot will query the attestation proxy to ask simply if a given `pilot_agent_id` has been attested before issuing a requested KEK. This will be an AND decision combined with the standard authorization procedure.

Failure to attest will result in a 403 forbidden response, just like a `kek_authorized: false` decision from the database.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.