mirror of
https://github.com/project-zot/zot.git
synced 2024-12-30 22:34:13 -05:00
d5065513f5
- Cosign supports 2 types of signature formats:
1. Using tag -> each new signature of the same manifest is
added as a new layer of the signature manifest having that
specific tag("{alghoritm}-{digest_of_signed_manifest}.sig")
2. Using referrers -> each new signature of the same manifest is
added as a new manifest
- For adding these cosign signature to metadb, we reserved index 0 of the
list of cosign signatures for tag-based signatures. When a new tag-based
signature is added for the same manifest, the element on first position
in its list of cosign signatures(in metadb) will be updated/overwritten.
When a new cosign signature(using referrers) will be added for the same
manifest this new signature will be appended to the list of cosign
signatures.
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com>
|
||
|---|---|---|
| .. | ||
| annotations.bats | ||
| anonymous_policy.bats | ||
| cloud_only.bats | ||
| cve.bats | ||
| delete_images.bats | ||
| detect_manifest_collision.bats | ||
| garbage_collect.bats | ||
| helpers_cloud.bash | ||
| helpers_metrics.bash | ||
| helpers_scrub.bash | ||
| helpers_wait.bash | ||
| helpers_zot.bash | ||
| metadata.bats | ||
| metrics.bats | ||
| metrics_minimal.bats | ||
| pushpull.bats | ||
| pushpull_authn.bats | ||
| pushpull_running_dedupe.bats | ||
| referrers.bats | ||
| restore_s3_blobs.bats | ||
| scrub.bats | ||
| sync.bats | ||
| sync_docker.bats | ||
| sync_harness.bats | ||
| sync_replica_cluster.bats | ||