search

chainguard-images / hello-world

A simple hello-world example using apko and melange.
Apache License 2.0
3 stars 4 forks source link

readme

hello-world

CI status

Hello, world!

Get It!

The image is available on cgr.dev:

docker pull cgr.dev/chainguard/hello-world:latest

Supported tags

Tag Digest Arch
latest sha256:50740b831ffe5ab7a214489c0b7fe63db6021e1ce7af2c1dc296db716c423222
View entry in Rekor		 amd64 arm64 armv7

Signing

All Chainguard Images are signed using Sigstore!


To verify the image, download cosign and run: ``` COSIGN_EXPERIMENTAL=1 cosign verify cgr.dev/chainguard/hello-world:latest | jq ``` Output: ``` Verification for cgr.dev/chainguard/hello-world:latest -- The following checks were performed on each of these signatures: - The cosign claims were validated - Existence of the claims in the transparency log was verified offline - Any certificates were verified against the Fulcio roots. [ { "critical": { "identity": { "docker-reference": "ghcr.io/chainguard-images/hello-world" }, "image": { "docker-manifest-digest": "sha256:50740b831ffe5ab7a214489c0b7fe63db6021e1ce7af2c1dc296db716c423222" }, "type": "cosign container image signature" }, "optional": { "1.3.6.1.4.1.57264.1.1": "https://token.actions.githubusercontent.com", "1.3.6.1.4.1.57264.1.2": "schedule", "1.3.6.1.4.1.57264.1.3": "209ac555d713248c62a0c9a41f36c789ccee194c", "1.3.6.1.4.1.57264.1.4": "Create Release", "1.3.6.1.4.1.57264.1.5": "chainguard-images/hello-world", "1.3.6.1.4.1.57264.1.6": "refs/heads/main", "Bundle": { "SignedEntryTimestamp": "MEYCIQDw9RDM6iEDauZ4BAxnUIfqv6V1bDNmBHAUUoB1QmlLWgIhALMZNI23G3aFDv10W84Up6mn/ZYTvr/n8qVDhi9rVEah", "Payload": { "body": "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", "integratedTime": 1670199106, "logIndex": 8417476, "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d" } }, "Issuer": "https://token.actions.githubusercontent.com", "Subject": "https://github.com/chainguard-images/hello-world/.github/workflows/release.yaml@refs/heads/main", "githubWorkflowName": "Create Release", "githubWorkflowRef": "refs/heads/main", "githubWorkflowRepository": "chainguard-images/hello-world", "githubWorkflowSha": "209ac555d713248c62a0c9a41f36c789ccee194c", "githubWorkflowTrigger": "schedule", "run_attempt": "1", "run_id": "3615720982", "sha": "209ac555d713248c62a0c9a41f36c789ccee194c" } } ] ``` You can verify that the image was built in Github Actions in this repository from the `Issuer` and `Subject` fields.

Build

This image is built with melange and apko.