specifications icon indicating copy to clipboard operation
specifications copied to clipboard

[question] registryScopes in trust policy

Open fseldow opened this issue 1 year ago • 1 comments

Hi team, i am reading the structure of trust policy properties, might have one question about registryScopes https://github.com/notaryproject/specifications/blob/main/specs/trust-store-trust-policy.md#trust-policy-properties

The article said The scope field supports filtering based on fully qualified repository URI ${registry-name}/${namespace}/${repository-name}. I have one scenario that all my images from certain registry or namespace are signed by same cert. So i would like to input ${registry-name}/* or ${registry-name}/${namespace}/*. However, it does not support according to the doc. So if possible, may i know the reason that we have to input the full url for registry scopes?

fseldow avatar Sep 04 '23 17:09 fseldow

Duplicated with issue https://github.com/notaryproject/specifications/issues/289

yizha1 avatar Mar 05 '24 03:03 yizha1