in container_images/registry-image-forked/commands/out.go [229:252]
func signImages(req resource.OutRequest, img v1.Image, tags []name.Tag) error {
var notaryConfigDir string
var err error
notaryConfigDir, err = req.Source.ContentTrust.PrepareConfigDir()
if err != nil {
return fmt.Errorf("prepare notary-config-dir: %w", err)
}
for _, tag := range tags {
trustedRepo, err := gcr.NewTrustedGcrRepository(notaryConfigDir, tag, createAuth(req))
if err != nil {
return fmt.Errorf("create TrustedGcrRepository: %w", err)
}
logrus.Infof("signing image with tag: %s", tag.Identifier())
err = trustedRepo.SignImage(img)
if err != nil {
logrus.Errorf("failed to sign image: %s", err)
}
}
return nil
}