Docker content trust feature in Kaniko build

[nayan-kalita]

How do I sign an image and push it to the repository using kaniko.

[nayan-kalita]

can someone update this? we need to sign images build with kaniko to establish content trust. same way how docker build does with DOCKER_CONTENT_TRUST=1

[akash2237778]

can someone update this? we need to sign images build with kaniko to establish content trust. same way how docker build does with DOCKER_CONTENT_TRUST=1

Are you able to find any solution to this?

[swarren83]

+1

[imjasonh]

I would recommend signing images built with Kaniko using cosign, after the build is complete, then verifying it before pulling+running it.

[adriannieto-attechnest]

I would recommend signing images built with Kaniko using cosign, after the build is complete, then verifying it before pulling+running it.

Even if this works for runtime to ensure end user images are secure, we would like to enforce the team to use signed images as base images, so we fully control what's happening under the hood.

For kanico just adding the check of signatures in public images while building would be really good.