docs: harden Docker practice security examples

This commit is contained in:
yeasy
2026-05-20 15:58:46 -07:00
parent 1b651e5f8c
commit d47afa7e75
4 changed files with 20 additions and 11 deletions
+2 -2
View File
@@ -298,8 +298,8 @@ docker push --disable-content-trust myregistry.com/myapp:v1.0.0
# 首次推送时会提示创建 Delegation Key
# 密钥存储在 ~/.docker/trust/private/root_keys/ 和 ~/.docker/trust/private/tuf_keys/
# 查看签名信息
docker inspect --format='{{.RepoDigests}}' myregistry.com/myapp:v1.0.0
# 查看 DCT/Notary 信任数据;RepoDigests 只是内容摘要,不等于签名验证
docker trust inspect --pretty myregistry.com/myapp:v1.0.0
```
### 18.6.4 供应链安全最佳实践