0
Fork 0
mirror of https://github.com/project-zot/zot.git synced 2024-12-16 21:56:37 -05:00
zot - A scale-out production-ready vendor-neutral OCI-native container image/artifact registry (purely based on OCI Distribution Specification)
Find a file
Andreea Lupu 41b05c60dd
feat: upload certificates and public keys for verifying signatures (#1485)
In order to verify signatures, users could upload their certificates and public keys using these routes:
	-> for public keys:
		/v2/_zot/ext/mgmt?resource=signatures&tool=cosign
	-> for certificates:
		/v2/_zot/ext/mgmt?resource=signatures&tool=notation&truststoreType=ca&truststoreName=name
Then the public keys will be stored under $rootdir/_cosign and the certificates will be stored under
$rootdir/_notation/truststore/x509/$truststoreType/$truststoreName.
Also, for notation case, the "truststores" field of $rootir/_notation/trustpolicy.json file will be
updated with a new entry "$truststoreType:$truststoreName".
Also based on the uploaded files, the information about the signatures validity will be updated
periodically.

Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com>
2023-07-06 14:57:59 +03:00
.github chore: fix dependabot alerts (#1581) 2023-07-05 11:42:24 +03:00
.zap fix(csp): upgrade UI and fix zap failure (#1372) 2023-04-13 13:48:09 -07:00
build build: ui extension needs mgmt (#1549) 2023-06-23 08:38:50 +03:00
cmd fix(zb): fixed remote repositories cleanup (#1461) 2023-05-19 09:51:15 -07:00
demos oras fix: 2022-08-30 21:39:16 +03:00
docs swagger: rename 'docs/' to 'swagger/' 2021-10-21 13:46:14 -07:00
errors feat: upload certificates and public keys for verifying signatures (#1485) 2023-07-06 14:57:59 +03:00
examples fix: changing default numWorkers, making it customizable and refactoring scheduler (#1563) 2023-07-04 11:03:29 +03:00
pkg feat: upload certificates and public keys for verifying signatures (#1485) 2023-07-06 14:57:59 +03:00
swagger feat: upload certificates and public keys for verifying signatures (#1485) 2023-07-06 14:57:59 +03:00
test test: add more registries in sync blackbox tests (#1568) 2023-06-30 21:07:04 +03:00
.gitignore feat(ui): package zui within zot binary (#1161) 2023-02-10 14:52:54 -08:00
CODE_OF_CONDUCT.md doc: add a CODE_OF_CONDUCT.md 2020-12-15 11:20:45 -08:00
codecov.yml refactor(artifact): remove oci artifact support (#1359) 2023-05-10 10:15:33 -07:00
CODEOWNERS add a CODEOWNERS file 2022-05-04 11:52:28 -07:00
COMPARISON.md move references to zotregistry.io and project-zot 2021-12-05 10:52:27 -08:00
CONTRIBUTING.md build(tags): remove redundant build tag ui_base (#857) 2022-10-10 15:05:55 +03:00
go.mod feat(referrers): added index support for referrers queries (#1560) 2023-07-05 09:42:16 -07:00
go.sum feat(referrers): added index support for referrers queries (#1560) 2023-07-05 09:42:16 -07:00
golangcilint.yaml chore: fix dependabot alerts (#1501) 2023-06-09 10:27:42 -07:00
LICENSE docs: fix copyright related info for cncf onboarding (#1117) 2023-01-17 15:43:45 -08:00
MAINTAINERS.md docs: fix CNCF related documentation (#1099) 2023-01-10 15:52:11 -08:00
Makefile feat(cve): implemented trivy image scan for multiarch images (#1510) 2023-07-06 11:36:26 +03:00
NOTICE docs: fix copyright related info for cncf onboarding (#1117) 2023-01-17 15:43:45 -08:00
README.md docs: update README.md (#1078) 2022-12-21 10:46:31 +02:00
README_fuzz.md Add fuzz tests for storage_fs (#601) 2022-07-27 20:37:55 +03:00
SECURITY.md chore: fix security alerts (#1493) 2023-06-01 16:53:50 -07:00
THIRD-PARTY-LICENSES.md update 3rd party licenses 2022-04-08 09:48:13 -07:00
tools.go chore(trivy): update trivy version and enforce OCI compliant repo names in local image storage (#1068) 2023-01-18 08:24:44 -08:00
zot.go zot: initial commit 2019-06-21 15:29:19 -07:00

zot build-test codecov.io Conformance Results CodeQL CII Best Practices Go Reference

zot: a production-ready vendor-neutral OCI image registry - images stored in OCI image format, distribution specification on-the-wire, that's it!

Docs

Documentation for zot is located at: https://zotregistry.io

Code of Conduct

Details are in the code of conduct