Skip to content

Conversation

@piyush-jena
Copy link
Contributor

@piyush-jena piyush-jena commented Jan 7, 2026

Description of changes:

  • ecr-credential-helper: update to 0.11.0

Testing done:
ecr-credential-helper test in ecs-3 variant

[ssm-user@control]$ apiclient set settings.image-verifier-plugins.notation.trustpolicy="*******"
[ssm-user@control]$ apiclient set settings.image-verifier-plugins.enabled=true
*********
bash-5.1# ctr i pull docker.io/library/hello-world:latest
ctr: image verifier bindir blocked pull of docker.io/library/hello-world:latest with digest sha256:d4aaab6242e0cace87e2ec17a2ed3d779d18fbfd03042ea58f2995626396a274 for reason: verifier notation-image-verifier rejected image (exit code 1): verifying image: docker.io/library/hello-world@sha256:d4aaab6242e0cace87e2ec17a2ed3d779d18fbfd03042ea58f2995626396a274
image verification failed: Error: signature verification failed: no signature is associated with "docker.io/library/hello-world@sha256:d4aaab6242e0cace87e2ec17a2ed3d779d18fbfd03042ea58f2995626396a274", make sure the artifact was signed successfully
bash-5.1# ctr -n k8s.io image pull *******/test-container-images:signed
public.ecr.aws/s2v1a1q8/test container i        saved
└──manifest (1882fa4569e0)                      complete        |++++++++++++++++++++++++++++++++++++++|
   ├──config (e7b39c54cdec)                     complete        |++++++++++++++++++++++++++++++++++++++|
   └──layer (1074353eec0d)                      complete        |++++++++++++++++++++++++++++++++++++++|
application/vnd.oci.image.manifest.v1+json sha256:1882fa4569e0c591ea092d3766c4893e19b8901a8e649de7067188aba3cc0679
Completed pull from OCI Registry (*******/test-container-images:signed) elapsed: 2.0 s  total:  3.7 Mi  (1.8 MiB/s)

Terms of contribution:

By submitting this pull request, I agree that this contribution is dual-licensed under the terms of both the Apache License, version 2.0, and the MIT license.

@piyush-jena piyush-jena changed the title Third Party Package Updates - Others Third Party Package Updates Jan 7, 2026
@piyush-jena piyush-jena force-pushed the pkgupdate-2025-12-22-notation-image-signing branch from 6b7a5dd to c8ddbb4 Compare January 7, 2026 01:07
@piyush-jena piyush-jena marked this pull request as ready for review January 7, 2026 19:18
@piyush-jena piyush-jena force-pushed the pkgupdate-2025-12-22-notation-image-signing branch from c8ddbb4 to 08c7484 Compare January 8, 2026 02:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants