66 lines
No EOL
2.6 KiB
JSON
66 lines
No EOL
2.6 KiB
JSON
{
|
|
"title": "JSON embedded in an atomic container signature",
|
|
"description": "This schema is a supplement to atomic-signature.md in this directory.\n\nConsumers of the JSON MUST use the processing rules documented in atomic-signature.md, especially the requirements for the 'critical' subjobject.\n\nWhenever this schema and atomic-signature.md, or the github.com/containers/image/signature implementation, differ,\nit is the atomic-signature.md document, or the github.com/containers/image/signature implementation, which governs.\n\nUsers are STRONGLY RECOMMENDED to use the github.com/containeres/image/signature implementation instead of writing\ntheir own, ESPECIALLY when consuming signatures, so that the policy.json format can be shared by all image consumers.\n",
|
|
"type": "object",
|
|
"required": [
|
|
"critical",
|
|
"optional"
|
|
],
|
|
"additionalProperties": false,
|
|
"properties": {
|
|
"critical": {
|
|
"type": "object",
|
|
"required": [
|
|
"type",
|
|
"image",
|
|
"identity"
|
|
],
|
|
"additionalProperties": false,
|
|
"properties": {
|
|
"type": {
|
|
"type": "string",
|
|
"enum": [
|
|
"atomic container signature"
|
|
]
|
|
},
|
|
"image": {
|
|
"type": "object",
|
|
"required": [
|
|
"docker-manifest-digest"
|
|
],
|
|
"additionalProperties": false,
|
|
"properties": {
|
|
"docker-manifest-digest": {
|
|
"type": "string"
|
|
}
|
|
}
|
|
},
|
|
"identity": {
|
|
"type": "object",
|
|
"required": [
|
|
"docker-reference"
|
|
],
|
|
"additionalProperties": false,
|
|
"properties": {
|
|
"docker-reference": {
|
|
"type": "string"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"optional": {
|
|
"type": "object",
|
|
"description": "All members are optional, but if they are included, they must be valid.",
|
|
"additionalProperties": true,
|
|
"properties": {
|
|
"creator": {
|
|
"type": "string"
|
|
},
|
|
"timestamp": {
|
|
"type": "integer"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
} |