Miloslav Trmač

Thanks for reaching out. Before dealing with syntax, what are you _actually trying to do_? What are the sources, destinations, expected effect?

Please reopen if more information becomes available.

@edsantiago probably has a good idea of what images exist / are appropriate to use from `quay.io/libpod`. If we have no requirements for how the subject images {are, are not}...

sigstore signatures are ordinary objects on a registry, and can be served that way. simple signing signatures are served using plain HTTP. It should not be very hard (set up...

… alternatively, we _could_ also design a way to store simple-signing signatures on the registry (perhaps not using exactly the sigstore tag convention, but using OCI referrers as intended). We’ve...

Ugh, I’d prefer not to have that option, recognizing that it really might be unavoidable. That makes me more motivated to argue that this PR should just do what c/image...

> Maybe what would be helpful here is for the proxy to expose back to the client the signature state Or have the proxy warn directly, and direct proxy’s stderr...

> This sounds good to me but to achieve reproducible documented process I'd expect a a git repository to contain that, that's what I was looking for. FWIW compare existing...

Thanks for reaching out. Without an example label I’m just guessing; but the spec says `+`, not `_`; https://semver.org does not contain a `_` character at all. So I’d expect...

Also, https://github.com/containers/skopeo/blob/main/CONTRIBUTING.md#sign-your-prs ; we can’t really even look at PRs with unclear copyright status.