which allows images to be signed when publishing to Docker hub. The consumers can later verify the producer of these images (prevent also image forgery, image replay attacks etc.)
We should start using this functionality when creating openscap/openscap-daemon-* SPC containers:
Docker starting from 1.8 introduced concept of Docker Content Trust (The Update Framework):
which allows images to be signed when publishing to Docker hub. The consumers can later verify the producer of these images (prevent also image forgery, image replay attacks etc.)
We should start using this functionality when creating openscap/openscap-daemon-* SPC containers:
This is more RFE, than a real bug.