4e9444d7

By: Michael Lynch <git@mtlynch.io>

Explain scoped Skopeo insecure policy

Document why the docker-archive policy can accept unsigned images safely: it only applies to the local archive built by the deploy script while the default policy rejects every other source.

Tree Dependencies

Suite timing

	Time to Start	Worker time	Duration	Time to finish	Idle
Config	2s	7s	7s	10s	2s
Eval	8s	59s	59s	1m08s	0s
Build	13s	7m18s	2m08s	2m21s	45s
Suite	2s	8m25s	2m19s	2m21s	47s

Timeline

Agent Instructions

This page shows suite timings.

This page is also available in machine-friendly formats. Request one with the Accept header:

curl --netrc -H 'Accept: application/json' https://nix-ci.com/cb:mtlynch:little-moments/skopeo-deploy/4e9444d732bbda9d52ce5921b26e0d1359dde153/timing
curl --netrc -H 'Accept: text/markdown' https://nix-ci.com/cb:mtlynch:little-moments/skopeo-deploy/4e9444d732bbda9d52ce5921b26e0d1359dde153/timing

For more instructions, fetch https://nix-ci.com/instructions .