Skip to content

Sign official images with OpenPubKey #561

Open

Description

@sudo-bmitch

Tell us about your request
It would be helpful to support OpenPubKey to verify official images from Docker. This could be done in addition to other signing solutions to give users the flexibility to use their own preferred signing solution.

Which service(s) is this request for?
Docker Official Images (DOI).

Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?
Verify the authenticity of official images. This can only be done by Docker.

Are you currently working around the issue?
Using images other than DOI or using DOI images without verifying their authenticity.

Additional context
I'll open similar issues for other signing tools.

Activity

  1. sudo-bmitch commented on Oct 9, 2023

    @sudo-bmitch
    Author

    Linking issues #562 and #563.

  2. added
    trusted_contentDocker Official Images, Docker Verified Publishers and Docker Sponsored Open Source requests
    on Oct 12, 2023
  3. moved this to Investigating in docker-roadmapon May 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

community_newNew idea raised by a community contributortrusted_contentDocker Official Images, Docker Verified Publishers and Docker Sponsored Open Source requests

Type

No type

Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions