-
Notifications
You must be signed in to change notification settings - Fork 142
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support specifying images using sha256 digests #411
Comments
I intend on implementing it (as this can be useful for us), and it will be nice if the project can take part of the current hacktoberfest. Thanks! |
I am liking this idea. It would be well in line with the "Reliable" principle in our upcoming "Design principles" draft: #420 We would probably have to make it an
I am sorry for getting back to you too late for this to make any sense. |
Cool, just now saw your comment, will try to implement that tomorrow! |
I had created a PR: #446 |
You can run docker images by specifying the sha256 digest of the designated image instead of using a specific version.
Using sha256 is somewhat more secure as it pins the exact image, thus not allowing possible overriding of a tag by a malicious actor.
Usage can be something along:
The text was updated successfully, but these errors were encountered: