4e9444d7

Explain scoped Skopeo insecure policy

Document why the docker-archive policy can accept unsigned images safely: it only applies to the local archive built by the deploy script while the default policy rejects every other source.

Agent Instructions

Each run corresponds to one flake attribute. Click a run for its logs and status.

Example: https://nix-ci.com/cb:mtlynch:little-moments/skopeo-deploy/4e9444d732bbda9d52ce5921b26e0d1359dde153/e0fe0a24-af59-4b6c-af24-cd9bc5d51676

Wait for suite to complete:

curl --netrc -N https://nix-ci.com/cb:mtlynch:little-moments/skopeo-deploy/4e9444d732bbda9d52ce5921b26e0d1359dde153/wait

This page is also available in machine-friendly formats. Request one with the Accept header:

• curl --netrc -H 'Accept: application/json' https://nix-ci.com/cb:mtlynch:little-moments/skopeo-deploy/4e9444d732bbda9d52ce5921b26e0d1359dde153
• curl --netrc -H 'Accept: text/markdown' https://nix-ci.com/cb:mtlynch:little-moments/skopeo-deploy/4e9444d732bbda9d52ce5921b26e0d1359dde153

For more instructions, fetch https://nix-ci.com/instructions .