Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add cosign save and cosign load commands #1094

Merged
merged 1 commit into from
Nov 22, 2021

Conversation

priyawadhwa
Copy link
Contributor

These commands allow users to store an image with associated signatures to disk (cosign save) and then take them from disk and load them into a remote registry (cosign load).

# Save to disk
cosign save --dir /path/to/image gcr.io/priya-wadhwa/myimage

# Load to a remote repo
cosign load --dir /path/to/image gcr.io/some-other-repo/myimage

Currently this only works with signatures, support for attestations and attachments still needs to be added.

Right now, the image index is only used as an implementation detail. Future work should allow saving and loading the entire image index, including the index.json.

part of #1015

Release Note

Add `cosign save` and `cosign load` commands for storing and loading signed images from disk

These commands allow users to store an image with associated signatures to disk (cosign save) and then take them from disk and load them into a remote registry (cosign load).

Currently this only works with signatures, support for attestations and attachments still needs to be added.

Right now, the image index is only used as an implementation details. Future work should allow saving and loading the entire image index, including the `index.json`.

Signed-off-by: Priya Wadhwa <priyawadhwa@google.com>
@dlorenc dlorenc merged commit 7ec91a4 into sigstore:main Nov 22, 2021
@github-actions github-actions bot added this to the v1.4.0 milestone Nov 22, 2021
@priyawadhwa priyawadhwa deleted the load-save branch November 22, 2021 23:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants