From 8ddf65a458202a73ed2576468e77f0d950eea334 Mon Sep 17 00:00:00 2001 From: Carolina Delwing Rosa Date: Tue, 9 Jan 2024 15:37:59 -0300 Subject: [PATCH] fix call-out boxes --- docs/image-verification.md | 15 ++++----------- 1 file changed, 4 insertions(+), 11 deletions(-) diff --git a/docs/image-verification.md b/docs/image-verification.md index 0879e7b..4e6ea53 100644 --- a/docs/image-verification.md +++ b/docs/image-verification.md @@ -3,11 +3,8 @@ The Tutorials container image is signed using [Sigstore's](https://sigstore.dev/) Cosign. The container image is signed using a cryptographic key pair that is private and stored internally. The public key is available in the official Spectro Cloud documentation repository at [**static/cosign.pub**](https://raw.githubusercontent.com/spectrocloud/librarium/master/static/cosign.pub). Use the public key to verify the authenticity of the container image. You can learn more about the container image signing process by reviewing the [Signing Containers](https://docs.sigstore.dev/signing/signing_with_containers) documentation page. -:::info - -Cosign generates a key pair that uses the ECDSA-P256 algorithm for the signature and SHA256 for hashes. The keys are stored in PEM-encoded PKCS8 format. - -::: +> [!NOTE] +> Cosign generates a key pair that uses the ECDSA-P256 algorithm for the signature and SHA256 for hashes. The keys are stored in PEM-encoded PKCS8 format. Use the following command to verify the authenticity of the container image. Replace the image tag with the version you want to verify. @@ -55,12 +52,8 @@ The following checks were performed on each of these signatures: ] ``` - -:::danger - -Do not use the container image if the authenticity cannot be verified. Verify you downloaded the correct public key and that the container image is from `ghcr.io/spectrocloud/tutorials`. - -::: +> [!CAUTION] +> Do not use the container image if the authenticity cannot be verified. Verify you downloaded the correct public key and that the container image is from `ghcr.io/spectrocloud/tutorials`. If the container image is not valid, an error is displayed. The following example shows an error when the container image is not valid.