From c29e013a3394cf665841597591b8a52bcdc70fee Mon Sep 17 00:00:00 2001 From: Jason Date: Thu, 7 Dec 2023 16:57:04 +1100 Subject: [PATCH] feat(notation): add trust store policy --- .notation/policy.json | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 .notation/policy.json diff --git a/.notation/policy.json b/.notation/policy.json new file mode 100644 index 0000000..e811ef6 --- /dev/null +++ b/.notation/policy.json @@ -0,0 +1,16 @@ +{ + "version": "1.0", + "trustPolicies": [ + { + "name": "fluxcd.io", + "registryScopes": [ "ghcr.io/jasonthedeveloper/podinfo-deploy" ], + "signatureVerification": { + "level" : "strict" + }, + "trustStores": [ "ca:fluxcd.io" ], + "trustedIdentities": [ + "*" + ] + } + ] +}