Content Trust in ACR: using methods other than Docker trust, ex. Cosign

Natasha Rosén 0 Reputation points
2024-02-23T11:46:14.4866667+00:00

Hi! I know that you can implement Docker's content trust with Azure Container Registries to only push signed images and only allow signed images to be pulled from the registry. Is there a way to configure something similar but using other tools? I'm specifically interested in Cosign from Sigstore. I'd like a similar functionality, where I can enable content trust, push signed images, and only allow signed images to be pulled from the ACR. Thank you!

Community Center | Not monitored
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Sam Cogan 10,812 Reputation points Microsoft Employee Volunteer Moderator
    2024-02-26T08:44:29.5633333+00:00

    No, ACR only supports Docker Content Trust.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.