https://github.com/ulcuber/verify-image-digests
Verify Docker Image digests hierarchy
https://github.com/ulcuber/verify-image-digests
container digest docker docker-image docker-registry hash
Last synced: about 2 months ago
JSON representation
Verify Docker Image digests hierarchy
- Host: GitHub
- URL: https://github.com/ulcuber/verify-image-digests
- Owner: ulcuber
- License: mit
- Created: 2025-05-18T09:35:47.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2025-05-18T09:42:05.000Z (about 1 year ago)
- Last Synced: 2026-04-30T16:34:03.684Z (about 2 months ago)
- Topics: container, digest, docker, docker-image, docker-registry, hash
- Language: Shell
- Homepage:
- Size: 2.93 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
WIP attempt to verify docker image tree
```bash
bash verify-image-digests [digest]
```
See `get_docker_root_digest` function to know where to take root digest
Though digest argument is optional if you want just to verify tree
If you beleive root digest is uncopromised then no need to specify it in args
# TODO:
- Manifest canonicalization?
- tar vs tar.gz layers
- Relate local index.json/manifest.json with distribution manifest