Conversation
Signed-off-by: s-stumbo <sally.stumbo@chainguard.dev>
Signed-off-by: s-stumbo <sally.stumbo@chainguard.dev>
✅ Deploy Preview for ornate-narwhal-088216 ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
There was a problem hiding this comment.
We should NOT provide the info that we are internally hosting artifacts on GAR. This is an internal implementation detail and partially also not true. Technical info like that should be confirmed with @angela-zhang and engineers potentially.
Signed-off-by: s-stumbo <sally.stumbo@chainguard.dev>
mosabua
left a comment
mosabua
left a comment
There was a problem hiding this comment.
The wording changes actually make it less correct than it was .. formatting improvements are good .. so I think we need some updates .. happy to chat next week .. travelling now
| * `libraries.cgr.dev` for library access | ||
| * `issuer.enforce.dev` for authentication | ||
|
|
||
| When using a repository manager, allowlist these domains in your repository manager. Your workstations and build infrastructure typically require no additional network access, as libraries are served through your repository manager. |
There was a problem hiding this comment.
Thats not correct .. you are now creating an allowlist in the repo manager .. its a network setup
| Chainguard Libraries require specific network access to ensure secure delivery of hardened Java and Python dependencies to your development environment. This guide details the domains and ports needed for authentication, package downloads, and verification tools. | ||
| [Chainguard Libraries](/chainguard/libraries/overview/) require specific network access to ensure secure delivery of hardened dependencies to your development environment. This guide details the domains and ports needed for authentication, package downloads, and verification tools. | ||
|
|
||
| ### Access for chainctl and other tools |
|
|
||
| When using a repository manager, allowlist these domains in your repository manager. Your workstations and build infrastructure typically require no additional network access, as libraries are served through your repository manager. | ||
|
|
||
| If accessing Chainguard Libraries directly for testing with curl or builds, allowlist these domains on your workstation. |
There was a problem hiding this comment.
you also dont have an allowlist on the workstation..
3 participants
[ ] Check if this is a typo or other quick fix and ignore the rest :)
Type of change
Clarify existing content, add section about library storage locations
What should this PR do?
Why are we making this change?
Internal questions about where libraries are stored and feedback that the current docs imply you have to use a repo manager
What are the acceptance criteria?
Content should be clear and accurate
How should this PR be tested?