Skip to content

Commit

Permalink
Update documentation
Browse files Browse the repository at this point in the history
  • Loading branch information
epmd-edp committed Nov 16, 2023
1 parent 06a4bfc commit 321b0d4
Show file tree
Hide file tree
Showing 4 changed files with 151 additions and 151 deletions.
2 changes: 1 addition & 1 deletion operator-guide/artifacts-verification/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@
<span class=w> </span><span class=s2>"optional"</span>:<span class=w> </span>null
<span class=w> </span><span class=o>}</span>
<span class=o>]</span>
</code></pre></div> <h2 id=verify-container-image-with-slsa-attestations>Verify Container Image With SLSA Attestations<a class=headerlink href=#verify-container-image-with-slsa-attestations title="Permanent link">⚓︎</a></h2> <p>An <a href=https://slsa.dev/ >SLSA</a> Level 3 provenance is verified using "INSERT OUT TOOL (SEEMS TO BE COSIGN VERIFY)". The following (SEEMS TO BE COSIGN VERIFY) command will verify the signature of an attestation and how it was issued. It will contain the payloadType, payload, and signature.</p> <p>Run the <code>cosign verify-attestation</code> command using the <a href=https://raw.githubusercontent.com/epam/edp-install/master/cosign.pub>cosign.pub</a>:</p> <div class=highlight><pre><span></span><code>cosign<span class=w> </span>verify-attestation<span class=w> </span>--key<span class=w> </span>https://raw.githubusercontent.com/epam/edp-install/master/cosign.pub<span class=w> </span>--type<span class=w> </span>slsaprovenance<span class=w> </span>epamedp/codebase-operator:2.20.0<span class=w> </span><span class=p>|</span><span class=w> </span>jq<span class=w> </span>.
</code></pre></div> <h2 id=verify-container-image-with-slsa-attestations>Verify Container Image With SLSA Attestations<a class=headerlink href=#verify-container-image-with-slsa-attestations title="Permanent link">⚓︎</a></h2> <p>An <a href=https://slsa.dev/ >SLSA</a> Level 3 provenance is verified using. The following command will verify the signature of an attestation and how it was issued. It will contain the payloadType, payload, and signature.</p> <p>Run the <code>cosign verify-attestation</code> command using the <a href=https://raw.githubusercontent.com/epam/edp-install/master/cosign.pub>cosign.pub</a>:</p> <div class=highlight><pre><span></span><code>cosign<span class=w> </span>verify-attestation<span class=w> </span>--key<span class=w> </span>https://raw.githubusercontent.com/epam/edp-install/master/cosign.pub<span class=w> </span>--type<span class=w> </span>slsaprovenance<span class=w> </span>epamedp/codebase-operator:2.20.0<span class=w> </span><span class=p>|</span><span class=w> </span>jq<span class=w> </span>.
</code></pre></div> <p>Verification for <a href="https://hub.docker.com/layers/epamedp/codebase-operator/2.20.0/images/sha256-36585a13b5b5ff5a15138e9d16cc74eb3aac4560b77be15161d3b3db25b89e1d?context=repo">epamedp/codebase-operator:2.20.0</a>:</p> <div class=highlight><pre><span></span><code>Verification<span class=w> </span><span class=k>for</span><span class=w> </span>epamedp/codebase-operator:2.20.0
The<span class=w> </span>following<span class=w> </span>checks<span class=w> </span>were<span class=w> </span>performed<span class=w> </span>on<span class=w> </span>each<span class=w> </span>of<span class=w> </span>these<span class=w> </span>signatures:
<span class=w> </span>-<span class=w> </span>The<span class=w> </span>cosign<span class=w> </span>claims<span class=w> </span>were<span class=w> </span>validated
Expand Down
2 changes: 1 addition & 1 deletion search/search_index.json

Large diffs are not rendered by default.

Loading

0 comments on commit 321b0d4

Please sign in to comment.