Skip to content

Commit 9362e42

Browse files
Add provenance target repository doc
1 parent 7923108 commit 9362e42

File tree

1 file changed

+23
-0
lines changed

1 file changed

+23
-0
lines changed

README.md

+23
Original file line numberDiff line numberDiff line change
@@ -274,6 +274,29 @@ Get the digest for your container _without_ pulling it using the [crane](https:/
274274
IMAGE="${IMAGE}@"$(crane digest "${IMAGE}")
275275
```
276276

277+
**Optional:**
278+
279+
Refer [Specifying a provenance target repository](https://docs.sigstore.dev/system_config/registry_support/#specifying-registry) when stored separately:
280+
281+
- Make sure to authenticate against the provenance target repository
282+
283+
- _Defaults_ when **NOT** specified:
284+
285+
**_registry_**: `index.docker.io`
286+
287+
**_namespace_**: `library`
288+
289+
**_provenance-target-repository_**: **Required**
290+
291+
- Run the below to set provenance target repository
292+
```shell
293+
export COSIGN_REPOSITORY=<registry>/<namespace>/<provenance-target-repository>
294+
```
295+
296+
297+
298+
299+
277300
To verify a container image, run the following command. Note that to use `ghcr.io` you need to set the `GH_TOKEN` environment variable as well.
278301

279302
```shell

0 commit comments

Comments
 (0)