Signing and Verifying Images with Docker Content Trust
Let's see how Docker Content Trust makes it smooth to verify the integrity and the publisher of Docker images.
Ensuring image integrity with DCT
Docker Content Trust (DCT) makes it simple for you to verify the integrity and publisher of images and is especially important when you're pulling images over untrusted networks such as the internet. At a high level, DCT lets you sign your images when you push them to registries like Docker Hub. It also lets you verify the images you pull and run as containers.
Press + to interact
Docker Content Trust image signing and verification
You can also use DCT to provide context, such as whether or not a developer has signed an image for use in a particular environment, such as prod or dev, or whether an image has been superseded by a newer ...