mirror of
https://github.com/yeasy/docker_practice.git
synced 2026-08-10 08:27:25 +00:00
docs: harden Docker practice security examples
This commit is contained in:
@@ -298,8 +298,8 @@ docker push --disable-content-trust myregistry.com/myapp:v1.0.0
|
||||
# 首次推送时会提示创建 Delegation Key
|
||||
# 密钥存储在 ~/.docker/trust/private/root_keys/ 和 ~/.docker/trust/private/tuf_keys/
|
||||
|
||||
# 查看签名信息
|
||||
docker inspect --format='{{.RepoDigests}}' myregistry.com/myapp:v1.0.0
|
||||
# 查看 DCT/Notary 信任数据;RepoDigests 只是内容摘要,不等于签名验证
|
||||
docker trust inspect --pretty myregistry.com/myapp:v1.0.0
|
||||
```
|
||||
|
||||
### 18.6.4 供应链安全最佳实践
|
||||
|
||||
Reference in New Issue
Block a user