scout-action icon indicating copy to clipboard operation
scout-action copied to clipboard

Update to include image verification

Open fr0gger03 opened this issue 7 months ago • 0 comments

With the availability of Docker Hardened Images, I would like to be able to verify an image when pulled as part of a pipeline. There are new scout commands for "docker scout attest get" and "docker scout attest list" that can be used for this purpose.

I think this should include the ability to:

  • retrieve all attestations
  • retrieve specific attestations
  • validate and show equivalent cosign command

Documentation link: https://docs.docker.com/dhi/how-to/verify/

fr0gger03 avatar Jun 17 '25 12:06 fr0gger03