StackStorm/st2-dockerfiles

Sign Docker Images

arm4b opened this issue · 0 comments

arm4b commented

Sign the StackStorm Docker images during the build CI/CD process so image consumers can ensure that the StackStorm images they pull from Docker Hub repository are signed.

See https://docs.docker.com/engine/reference/commandline/trust/ and https://docs.docker.com/engine/security/trust/content_trust/ for more info.