Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cannot verify docker image locally with public key #3940

Open
csktan opened this issue Nov 21, 2024 · 0 comments
Open

Cannot verify docker image locally with public key #3940

csktan opened this issue Nov 21, 2024 · 0 comments
Labels
bug Something isn't working

Comments

@csktan
Copy link

csktan commented Nov 21, 2024

Description

I am trying to verify my docker image using a cosign which I signed with cosign successfully. The command I am using is

cosign verify --key <pub_key_path/cosign.pub> <image/repo:tag>
And in addition I have these two variables disabled even though cosign is trying to connect to the tuf and rekor which I don't wanted do.
I even tried with these flags still getting the same issue.
--no-rekor
--tuf-mirror=false
export COSIGN_REKOR_DISABLED=1
export COSIGN_TUF_DISABLED=1

Version
2.4.1

Is there any way that I can verify my signed docker image without connecting to the tuf and rekor.

Thank you,

@csktan csktan added the bug Something isn't working label Nov 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant