Shiwei Zhang
Shiwei Zhang
Currently, this EKU is marked as default as in [notation-go-lib](https://github.com/notaryproject/notation-go-lib/blob/v0.7.0-alpha.1/signature/jws/verifier.go#L38-L42).
@FeynmanZhou We missed this today, and need to bring this up in the next meeting.
This can also be done by `--export-manifest` but more simplified. @FeynmanZhou @yizha1 Any comments?
That's a different thing. The idea was to export the manifest or the manifest descriptor without fetching anything from the remote registry, which may not be trusted.
This also can be resolved by resolving #378 and then `oras manfiest fetch --descriptor`. However, doing `--export-manifest` or `--export-manifest-descriptor` is more efficient.
I was expecting to have something similar to [--metadata-file](https://docs.docker.com/engine/reference/commandline/buildx_build/#metadata-file).
By running the following commands, we will get a `metadata.json` file. ``` docker buildx create --use docker buildx build --load --metadata-file metadata.json https://github.com/oras-project/oras.git#main ``` The content of `metadata.json` is ```json...
@jasminetMSFT Could you help follow up?
The user requirement needs to be verified by the local signing functionality of notation (Notary V2).