notation icon indicating copy to clipboard operation
notation copied to clipboard

Container image verification failed

Open iamantil opened this issue 5 months ago • 3 comments

When verifying the signed container image with notation I am getting the error

notation verify $IMAGE Warning: Always verify the artifact using digest(@sha256:...) rather than a tag(:v1) because resolved digest may not point to the same signed artifact, as tags are mutable. Error: signature verification failed for all the signatures associated with $registry/$REPO@sha256:value

I am able to sign the container image successfully, I have also added the root certificate into the notation trusted store but still getting the error.

Any guidance would be appreciated.

iamantil avatar Sep 03 '24 05:09 iamantil