containerd / containerd/nerdctl
support --insecure-ignore-tlog=true for cosign
- Dominant language
- Go
- Stars
- 10.4k
- Forks
- 826
- Avg merge
- 1d 23h
- Merged PRs (30d)
- 44
Description
### What is the problem you're trying to solve
when pull image with cosign，there is a error
i find it need `--insecure-ignore-tlog=true` for cosign or `--private-infrastructure`
see: https://github.com/sigstore/cosign/issues/2808
### Describe the solution you'd like
should we add `--insecure-ignore-tlog=true` or `--private-infrastructure` for nerdctl ?
like this?
```
nerdctl pull --verify=cosign --cosign-key cosign.pub --cosign-insecure-ignore-tlog=true release.daocloud.io/zzg/test-cosign:v1
```
### Additional context
_No response_
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.