Releases: mxab/nacp
Releases · mxab/nacp
v0.6.0
v0.5.0
What's Changed
This release introduces the first version of the notary projects's image verification via NACP.
It allows either via the notation or OPA validator to verify the signature of the images specified in you job's task config.
Demo
notation-demo.mp4
Opa rule:
errors contains msg if {
some g, t
input.TaskGroups[g].Tasks[t].Driver == "docker"
image := input.TaskGroups[g].Tasks[t].Config.image
# check
not notation_verify_image(image)
msg := sprintf("TaskGroup %d Task %d image is invalid (image %s)", [g, t, image])
}
Full Changelog: v0.4.1...v0.5.0