2 ms·
Yes that is the plan, once everything is in place. The next step is to turn it on for official images (which are all signed now).
by justincormack 10y ago
Yes that is the plan, once everything is in place. The next step is to turn it on for official images (which are all signed now).
- endophage 10y agoTo add to Justin's comment, we merged what we've called "trust pinning" into Notary. We're still iterating on exactly the right scopes to pin to, but anticipate that making it into docker in the not too distant future. That will enable you to hard fail when pulling images not signed by an explicitly approved source.