Skip to content

Commit 6696d2e

Browse files
authored
Merge pull request #423 from robnester-rh/EC-1109
docs(posts): update URL for action-validate-image
2 parents 4a6ae0e + 65cc512 commit 6696d2e

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

website/content/posts/introducing-action-validate-image.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -71,7 +71,7 @@ We employ SLSA tooling to generate provenance. This helps track the build proces
7171
EC Action Validate works by assessing your container images against a set of validation checks. You can customize these checks through a policy to align with the specific security and compliance guidelines of your organization or industry. Whether the image passes or fails, you'll receive a GitHub summary output, and additional logs will be available in YAML format within the action.
7272
```yaml
7373
- name: Validate image (keyless)
74-
uses: enterprise-contract/[email protected]
74+
uses: conforma/[email protected]
7575
with:
7676
image: ${{ needs.build.outputs.image }}@${{ needs.build.outputs.digest }}
7777
identity: https:\/\/github\.com\/(slsa-framework\/slsa-github-generator|${{ github.repository_owner }}\/${{ github.event.repository.name }})\/
@@ -102,7 +102,7 @@ Upon successful validation, this step promotes the image by pushing the latest v
102102
Here is a version of the EC Action Validate that verifies artifacts signed by cosign with long-lived signing secrets. This method uses a public key, stored in a secret variable, to verify the image signature, thereby ensuring its integrity through a three-stage validation process: Signature Verification, Attestation Verification, and Policy Compliance.
103103
```yaml
104104
- name: Validate image (long-lived)
105-
uses: enterprise-contract/[email protected]
105+
uses: conforma/[email protected]
106106
with:
107107
image: quay.io/konflux-ci/ec-golden-image:latest
108108
key: ${{ vars.PUBLIC_KEY }}
@@ -121,4 +121,4 @@ By using either keyless or long-lived authentication methods, you can tailor EC
121121

122122
EC Validate is a GitHub Action aimed at elevating the security and compliance of your container images right within your GitHub workflow. By offering a range of authentication methods and customizable or defined policies, this action ensures that only validated and compliant images make it to deployment. It's a solution for organizations looking to adhere to organizational and industry standards while automating their pipelines within GitHub.
123123

124-
Interested in learning more? Visit the EC Validate action in [GitHub's Market Place](https://github.com/marketplace/actions/ec-validate) for a user guide. If you would like to see the code, feel free to explore [our GitHub repository](https://github.com/enterprise-contract/action-validate-image).
124+
Interested in learning more? Visit the EC Validate action in [GitHub's Market Place](https://github.com/marketplace/actions/ec-validate) for a user guide. If you would like to see the code, feel free to explore [our GitHub repository](https://github.com/conforma/action-validate-image).

0 commit comments

Comments
 (0)