Signing Custom Image locally

How to sign a custom image locally with AWS Signer, before pushing to private ECR repo? And how to automate verification of image when it is pulled from private repo?

Sujets

Conteneurs Sécurité, identité et conformité

Balises

Conteneurs Signataire AWS

Langue

English

Vansh

demandé il y a 3 mois137 vues

1 réponse

Le plus récent
Le plus de votes
La plupart des commentaires

Réponse acceptée

Hi, This very recent blog post is close to what you're looking for: https://aws.amazon.com/blogs/containers/signing-and-validating-oci-artifacts-with-aws-signer/

It will first show how to sign an image with AWS Signer and then how to verify it: it examines how an organization may sign and verify artifacts in a typical SDLC, and demonstrate how to get started with this process with a reference architecture.

This post shows you how to do local signature: https://medium.com/@LachlanEvenson/container-signing-with-notary-v2-13dd425e95d6

Best,

Didier