From ee9d8a290a8404d02e32c5fce46b1e4a098283f4 Mon Sep 17 00:00:00 2001 From: renner Date: Wed, 29 Jul 2026 15:46:35 +0200 Subject: [PATCH] feat: add aurora keys to image --- system_files/shared/etc/containers/policy.json | 11 +++++++++++ .../registries.d/ghcr.io-get-aurora-dev.yaml | 3 +++ .../usr/lib/pki/containers/ghcr.io-get-aurora-dev.pub | 0 3 files changed, 14 insertions(+) create mode 100644 system_files/shared/etc/containers/registries.d/ghcr.io-get-aurora-dev.yaml rename cosign.pub => system_files/shared/usr/lib/pki/containers/ghcr.io-get-aurora-dev.pub (100%) diff --git a/system_files/shared/etc/containers/policy.json b/system_files/shared/etc/containers/policy.json index 20be49f..46be250 100644 --- a/system_files/shared/etc/containers/policy.json +++ b/system_files/shared/etc/containers/policy.json @@ -41,6 +41,17 @@ } } ], + "ghcr.io/get-aurora-dev": [ + { + "type": "sigstoreSigned", + "keyPaths": [ + "/usr/lib/pki/containers/ghcr.io-get-aurora-dev.pub" + ], + "signedIdentity": { + "type": "matchRepository" + } + } + ], "": [ { "type": "insecureAcceptAnything" diff --git a/system_files/shared/etc/containers/registries.d/ghcr.io-get-aurora-dev.yaml b/system_files/shared/etc/containers/registries.d/ghcr.io-get-aurora-dev.yaml new file mode 100644 index 0000000..3b4a936 --- /dev/null +++ b/system_files/shared/etc/containers/registries.d/ghcr.io-get-aurora-dev.yaml @@ -0,0 +1,3 @@ +docker: + ghcr.io/get-aurora-dev: + use-sigstore-attachments: true diff --git a/cosign.pub b/system_files/shared/usr/lib/pki/containers/ghcr.io-get-aurora-dev.pub similarity index 100% rename from cosign.pub rename to system_files/shared/usr/lib/pki/containers/ghcr.io-get-aurora-dev.pub