You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
- Update URL for action-validate-image repository from
`enterprise-contract/action-validate-image` to
`conforma/action-validate-image` in `introducting the action validate
image` blog post.
Ref: EC-1109
Signed-off-by: Rob Nester <[email protected]>
Copy file name to clipboardExpand all lines: website/content/posts/introducing-action-validate-image.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -71,7 +71,7 @@ We employ SLSA tooling to generate provenance. This helps track the build proces
71
71
EC Action Validate works by assessing your container images against a set of validation checks. You can customize these checks through a policy to align with the specific security and compliance guidelines of your organization or industry. Whether the image passes or fails, you'll receive a GitHub summary output, and additional logs will be available in YAML format within the action.
@@ -102,7 +102,7 @@ Upon successful validation, this step promotes the image by pushing the latest v
102
102
Here is a version of the EC Action Validate that verifies artifacts signed by cosign with long-lived signing secrets. This method uses a public key, stored in a secret variable, to verify the image signature, thereby ensuring its integrity through a three-stage validation process: Signature Verification, Attestation Verification, and Policy Compliance.
@@ -121,4 +121,4 @@ By using either keyless or long-lived authentication methods, you can tailor EC
121
121
122
122
EC Validate is a GitHub Action aimed at elevating the security and compliance of your container images right within your GitHub workflow. By offering a range of authentication methods and customizable or defined policies, this action ensures that only validated and compliant images make it to deployment. It's a solution for organizations looking to adhere to organizational and industry standards while automating their pipelines within GitHub.
123
123
124
-
Interested in learning more? Visit the EC Validate action in [GitHub's Market Place](https://github.com/marketplace/actions/ec-validate) for a user guide. If you would like to see the code, feel free to explore [our GitHub repository](https://github.com/enterprise-contract/action-validate-image).
124
+
Interested in learning more? Visit the EC Validate action in [GitHub's Market Place](https://github.com/marketplace/actions/ec-validate) for a user guide. If you would like to see the code, feel free to explore [our GitHub repository](https://github.com/conforma/action-validate-image).
0 commit comments