You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I am trying to verify my docker image using a cosign which I signed with cosign successfully. The command I am using is
cosign verify --key <pub_key_path/cosign.pub> <image/repo:tag>
And in addition I have these two variables disabled even though cosign is trying to connect to the tuf and rekor which I don't wanted do.
I even tried with these flags still getting the same issue.
--no-rekor
--tuf-mirror=false
export COSIGN_REKOR_DISABLED=1
export COSIGN_TUF_DISABLED=1
Version
2.4.1
Is there any way that I can verify my signed docker image without connecting to the tuf and rekor.
Thank you,
The text was updated successfully, but these errors were encountered:
Description
I am trying to verify my docker image using a cosign which I signed with cosign successfully. The command I am using is
cosign verify --key <pub_key_path/cosign.pub> <image/repo:tag>
And in addition I have these two variables disabled even though cosign is trying to connect to the tuf and rekor which I don't wanted do.
I even tried with these flags still getting the same issue.
--no-rekor
--tuf-mirror=false
export COSIGN_REKOR_DISABLED=1
export COSIGN_TUF_DISABLED=1
Version
2.4.1
Is there any way that I can verify my signed docker image without connecting to the tuf and rekor.
Thank you,
The text was updated successfully, but these errors were encountered: