From 9362e42860da5fee5f7b42c3a0128685398c4088 Mon Sep 17 00:00:00 2001 From: saisatishkarra Date: Wed, 3 Jan 2024 09:45:50 -0600 Subject: [PATCH] Add provenance target repository doc --- README.md | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/README.md b/README.md index 1d654341a..59dad17db 100644 --- a/README.md +++ b/README.md @@ -274,6 +274,29 @@ Get the digest for your container _without_ pulling it using the [crane](https:/ IMAGE="${IMAGE}@"$(crane digest "${IMAGE}") ``` +**Optional:** + +Refer [Specifying a provenance target repository](https://docs.sigstore.dev/system_config/registry_support/#specifying-registry) when stored separately: + +- Make sure to authenticate against the provenance target repository + +- _Defaults_ when **NOT** specified: + + **_registry_**: `index.docker.io` + + **_namespace_**: `library` + + **_provenance-target-repository_**: **Required** + +- Run the below to set provenance target repository + ```shell + export COSIGN_REPOSITORY=// + ``` + + + + + To verify a container image, run the following command. Note that to use `ghcr.io` you need to set the `GH_TOKEN` environment variable as well. ```shell