search

chainguard-images / .github

1 stars 10 forks source link

Update Verification Code Snippet? #39

Closed ChrisJBurns closed 5 months ago

ChrisJBurns commented 6 months ago

When users follow the README to verify Chainguard images due to keyless signature capabilities errors are returned:

$ COSIGN_EXPERIMENTAL=1 cosign verify cgr.dev/chainguard/apko | jq 
Error: --certificate-identity or --certificate-identity-regexp is required for verification in keyless mode
main.go:74: error during command execution: --certificate-identity or --certificate-identity-regexp is required for verification in keyless mode

Perhaps the snippet needs to be updated to something like:

$ cosign verify cgr.dev/chainguard/apko --certificate-identity=https://github.com/chainguard-images/images/.github/workflows/release.yaml@refs/heads/main  --certificate-oidc-issuer=https://token.actions.githubusercontent.com | jq