Feynman Zhou
Feynman Zhou
Looks cool.
> 1. Could any doc be updated to tell users to use oras pull to populate target repo of psresource-cache-rules? 2. Or should Find-PSResource & Install-PSResource handle the 'pull' themself...
@JXavierMSFT @johnsonshi Would you mind following up on this feature request to Artifact Cache auth?
Hi @justlucknb , where did you store the generated key and cert? Is there a key management system like HashiCorp Vault?
Hi @nipil , thanks for your request. I think signing using certs on smartcard is not supported in Notation. Can you clarify more on the smartcard? This may need to...
Introducing the auth fallback mechanism in the library makes sense to me as it makes the client authentication work with different registries. @oras-project/oras-go-maintainers any thoughts?
Linking https://github.com/helm/helm/pull/30963
Hi @Horiodino, thanks for your interest. You are welcome to raise a PR.
Hi @david-freistrom , In Notation v1.3.1, the `notation sign` command defaults to storing signatures using the [OCI referrers tag schema](https://github.com/opencontainers/distribution-spec/blob/v1.1.1/spec.md#referrers-tag-schema) for maximum compatibility. The notation verify/list/inspect commands will attempt to...
Hi @nobbs , thanks for checking. From the signature tag name, it is a Referrers Tag Schema format. So I think GAR does not support Referrers API because `notation sign`...