search

notaryproject / specifications

Cross tooling and interoperability specifications
https://notaryproject.dev/
Apache License 2.0
155 stars 44 forks source link

[question] registryScopes in trust policy #278

Open fseldow opened 1 year ago

fseldow commented 1 year ago

Hi team, i am reading the structure of trust policy properties, might have one question about registryScopes https://github.com/notaryproject/specifications/blob/main/specs/trust-store-trust-policy.md#trust-policy-properties

The article said The scope field supports filtering based on fully qualified repository URI ${registry-name}/${namespace}/${repository-name}. I have one scenario that all my images from certain registry or namespace are signed by same cert. So i would like to input ${registry-name}/* or ${registry-name}/${namespace}/*. However, it does not support according to the doc. So if possible, may i know the reason that we have to input the full url for registry scopes?

yizha1 commented 6 months ago

Duplicated with issue https://github.com/notaryproject/specifications/issues/289