6
VOTE
Status
Future consideration
Workspace
* IBM Cloud Ideas
Categories
Containers
Created by
Guest
Created on
Apr 9, 2025
RELATED IDEAS
CodeEngine to work with Signed images
Today, CodeEngine works with "un-signed" images. It would be very helpful if Code Engine could understand signed images and be able to work with it by verifying.
For now, we can consider "skopeo" as a signing utility. Users could provide the public key which is then used to verify the signature in the CodeEngine construct.
| Idea priority | Medium |
| Needed By | Quarter |
By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.
In development, likely delivery in 4Q25
Currently still not prioritzed, will re-evalutate in September 2025
Thanks for the input, we will review in our periodic requirements screening.
Both Container Registry and Code Engine are services available from the IBM Cloud Catalog. They should work seamlessly together including code signing to increase trust in the services deployed on IBM Cloud. Sadly, Code Engine does not seem to validate image signatures at this time. Voting +1 to have this feature added in the near future to Code Engine capabilities.