-
Notifications
You must be signed in to change notification settings - Fork 45
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
As a user, I can mirror cosign type signatures #1166
Comments
Cosign signatures are stored in the format of an OCI image manifest. This image has specific rules for tags. The tag is the format of sha256 of the signed image and .sig extension. For example, if image with digest sha256:12345 was signed with cosign, an oci image manifest will be created and tagged as That manifest will contain layer with the simplesigning media_type which will contain the signature payload. |
No description provided.
The text was updated successfully, but these errors were encountered: