dotnet / dotnet/docker-tools

Validate signatures before publishing images

Open
#2,094 0 comments 0 reactions 0 assignees View on GitHub
area-infrastructure up-for-grabs
Dominant language
C#
Stars
181
Forks
67
Avg merge
2d 15h
Merged PRs (30d)
10

Description

If signing is enabled, the Publish job should verify the signatures of images before copying them to the publish repo prefix. This would prevent accidental publishing of unsigned images or publishing invalid signatures.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.