Issues with check: images-are-certified

[betoredhat]

Hello team,

The check "images-are-certified" validates that the registry/image both matches in the certification database. We using images already certified but hosted in a local registry. Can validation be based only on image information without considering the hosting registry?

Thanks in advance.

[imdad000]

Even I too facing the same Issue

[komish]

@betoredhat The challenge we have here is that the certification databases don't provide an explicit API for querying the digest of an image to determine its association with a certification project/status.

Until we have an API path that allows us to map back the digest of a certified image to an entity in our certification database, we'll have trouble implementing digest-only verification of certification.

This isn't an uncommon request in certification tooling, so we'll leave this open allowing us time to identify any potential avenues to resolution.