Can't get old bundle format to work #4767
Unanswered
ackammawork
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Now that
---new-bundle-formatis true by default, my vex document attestations are using the OCI 1.1 referrers API. The issue is I want trivy to be able to detect my attached vex document from my registry usingtrivy image <image> --vex ociand that only seems to work with the older tagging method. So I'm trying to set--new-bundle-format=falseand I can't seem to get it to work or understand what I need to do.I'm having trouble finding what I need to set for
--signing-configand/or--use-signing-configand what these mean. I just want to use the old tagging method without having to install version 2.6.1.Beta Was this translation helpful? Give feedback.
All reactions