Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sign the image descriptor's digest by the Notary (Signify) service #12046

Open
Sawthis opened this issue Oct 2, 2024 · 0 comments
Open

Sign the image descriptor's digest by the Notary (Signify) service #12046

Sawthis opened this issue Oct 2, 2024 · 0 comments
Labels
area/ci Issues or PRs related to CI related topics

Comments

@Sawthis
Copy link
Contributor

Sawthis commented Oct 2, 2024

Description

As described in the kyma-project/warden#282 we should sign the image descriptor's digest instead of image config's digest by the Notary (Signify) service. The change was introduced in #12033 and then reverted as Warden doesn't support it now.

Test with the warden team(Otters) if after revert images are verified correctly.

Reasons

kyma-project/warden#282

Acceptance Criteria

Attachments

kyma-project/warden#282

@Sawthis Sawthis added the area/ci Issues or PRs related to CI related topics label Oct 2, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/ci Issues or PRs related to CI related topics
Projects
None yet
Development

No branches or pull requests

1 participant