Docker compose pull to respect DOCKER_CONTENT_TRUST

docker / compose

Define and run multi-container applications with Docker

https://docs.docker.com/compose/

Apache License 2.0

32.97k stars 5.1k forks source link

Docker compose pull to respect DOCKER_CONTENT_TRUST #11948

Open kevinh-jumbo opened 2 days ago

kevinh-jumbo commented 2 days ago

Description

Sort of a resurrection of https://github.com/docker/compose/issues/4787 but now that we're in v2 are there any plans to implement docker content trust for docker compose pull just like a regular docker pull does?

ndeloof commented 1 day ago

This indeed is feasible within compose v2, still need to copy/paste whole https://github.com/docker/cli/blob/master/cli/command/image/trust.go until some refactoring occurs to make this code reusable from compose codebase