cli icon indicating copy to clipboard operation
cli copied to clipboard

Published 20 hours ago • verified publisher icon blue-build

fix: Updating policy.json to properly verify images

Open gmpinder opened this issue 4 months ago • 5 comments

We need to look into some workflow to handle properly verifying images before rebasing on a signed keyless image.

  • https://www.mankier.com/5/containers-policy.json#Examples
  • https://github.com/bsherman/ublue-custom/blob/main/.github/workflows/build.yml#L181-L191
  • https://github.com/sigstore/root-signing/blob/main/repository/repository/root.json
  • https://github.com/sigstore/sigstore/tree/main/pkg/tuf/repository/targets

gmpinder avatar Feb 25 '24 02:02 gmpinder