Signing Custom Image locally

Question

How to sign a custom image locally with AWS Signer, before pushing to private ECR repo? 
And how to automate verification of image when it is pulled from private repo?

Didier_Durand · Accepted Answer

Hi,
This very recent blog post is close to what you're looking for: https://aws.amazon.com/blogs/containers/signing-and-validating-oci-artifacts-with-aws-signer/

It will first show how to sign an image with AWS Signer and then how to verify it: it examines how an organization may sign and verify artifacts in a typical SDLC, and demonstrate how to get started with this process with a reference architecture.

This post shows you how to do local signature: https://medium.com/@LachlanEvenson/container-signing-with-notary-v2-13dd425e95d6

Best,

Didier

Signing Custom Image locally

Conteúdo relevante