Tonis Tiigi 47e852f061 image: pull/load/save attestation manifest and signatures with image ...

Updates docker pull to pull related attestation manifest and
any signatures for that manifest in cosign referrer objects.

These objects are transferred with the image when running
docker save and docker load and can be used to identify
the image in future updates.

Push is not updated atm as the currect push semantics
in containerd mode do not have correct immutability
guaranteed and don't work with image indexes.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>

2025-11-12 07:53:46 -08:00

4.6 KiB

Raw Permalink Blame History

View Raw