Ayato Tokubi
Ayato Tokubi
/cherry-pick release-1.33
/cherry-pick release-1.32
/cherry-pick release-1.31
/cherry-pick release-1.30
yup😄 /assign
/test all to test ci
Currently we can't even pull signed artifacts. I don't know whether it's supposed to be implemented in the future, or not implemented for some reasons. We can pull them by...
https://github.com/sigstore/cosign/tree/main/pkg/oci/layout cosign saves signatures like this. ```bash cosign save --dir here ghcr.io/cri-o/bundle:main cat here/index.json { "schemaVersion": 2, "mediaType": "application/vnd.oci.image.index.v1+json", "manifests": [ { "mediaType": "application/vnd.oci.image.index.v1+json", "size": 1144, "digest": "sha256:d7dbf6b0d16d0667eee494f661520ab39146ee23726cae4eea7da8bfc47875d6", "annotations": {...