Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Alibaba Cloud Container Registry #524

Merged
merged 1 commit into from
Aug 8, 2021
Merged

Conversation

denverdino
Copy link
Contributor

@denverdino denverdino commented Aug 7, 2021

Signed-off-by: Li Yi denverdino@gmail.com

I have tested cosign for Alibaba Cloud Container Registry and work!

My verify result:

$ cosign sign -key cosign.key registry.cn-hangzhou.aliyuncs.com/denverdino/busybox
Enter password for private key:
Pushing signature to: registry.cn-hangzhou.aliyuncs.com/denverdino/busybox:sha256-dca71257cd2e72840a21f0323234bb2e33fea6d949fa0f21c5102146f583486b.sig

$ cosign verify -key cosign.pub registry.cn-hangzhou.aliyuncs.com/denverdino/busybox

Verification for registry.cn-hangzhou.aliyuncs.com/denverdino/busybox --
The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key
  - Any certificates were verified against the Fulcio roots.
{"critical":{"identity":{"docker-reference":"registry.cn-hangzhou.aliyuncs.com/denverdino/busybox"},"image":{"docker-manifest-digest":"sha256:dca71257cd2e72840a21f0323234bb2e33fea6d949fa0f21c5102146f583486b"},"type":"cosign container image signature"},"optional":null}

Based on: #40

Signed-off-by: Li Yi <denverdino@gmail.com>
@dlorenc dlorenc merged commit 07bf0f2 into sigstore:main Aug 8, 2021
@cpanato cpanato added this to the v1.1.0 milestone Aug 9, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants