I wonder if the RL containers provide signing data? Upstream provide already a standard configuration for their registries. Has this been taken into consideration? Providing a public sigstore would be the first step.
I wonder if the RL containers provide signing data? Upstream provide already a standard configuration for their registries. Has this been taken into consideration? Providing a public sigstore would be the first step.