GnuPG
GnuPG manages public and private keys to encrypt data and verify signatures. Package repositories, for example those of Terraform and Docker, use it to sign packages.
Key concepts #
- Key pair: public key to encrypt and verify, private key to decrypt and sign.
- Signature: proves who published a file.
- See also public key authentication.
Learn it #
Read Installing and using PGP.
More tutorials that use GnuPG
Related tutorials
Security
HashiCorp Vault
HashiCorp Vault is a secrets manager that stores, generates and encrypts credentials, tokens and keys with fine-grained access control and audit logs.
- Security
Checkov
Checkov is an open source static analysis tool that scans Terraform, Kubernetes and Dockerfile code for security and compliance misconfigurations.
Security
Trivy
Trivy is an open source security scanner that finds vulnerabilities, misconfigurations and secrets in container images, code and infrastructure files.