Skip to content

Conversation

@github-actions
Copy link
Contributor

Summary

Added commands to retrieve SLSA provenance attestations in raw in-toto format.

Changes

  • Added "Retrieving the raw in-toto format" subsection to the "Provenance attestation example" section
  • Included three-step command sequence using docker buildx imagetools inspect, jq, and crane to extract the complete attestation blob
  • Added explanatory text distinguishing this method from the template-based inspection approach

Fixes #23366


🤖 Generated with cagent

This change was automatically generated by the documentation agent team
in response to issue #23366.

🤖 Generated with cagent
@netlify
Copy link

netlify bot commented Feb 10, 2026

Deploy Preview for docsdocker ready!

Name Link
🔨 Latest commit 8c62305
🔍 Latest deploy log https://app.netlify.com/projects/docsdocker/deploys/698b144e1a9f02000832ac92
😎 Deploy Preview https://deploy-preview-24116--docsdocker.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@dvdksn dvdksn closed this Feb 10, 2026
@dvdksn dvdksn reopened this Feb 10, 2026
@github-actions github-actions bot added the area/build Relates to Dockerfiles or docker build command label Feb 10, 2026
@dvdksn
Copy link
Contributor

dvdksn commented Feb 11, 2026

Closing this PR. The commands don't work correctly for multi-platform images (they return multiple digests). The existing docs are already sufficient: the "Inspecting Provenance" section shows how to access provenance data using imagetools inspect templates, and the JSON example provides a structural reference. No additional commands needed.

@dvdksn dvdksn closed this Feb 11, 2026
@dvdksn dvdksn deleted the agent/issue-23366 branch February 11, 2026 10:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

agent/generated area/build Relates to Dockerfiles or docker build command

Projects

None yet

Development

Successfully merging this pull request may close these issues.

For the "Provenance attestation example" the commands to display the attestation are not displayed

1 participant