Skip to content

Sign images#

Mirantis Secure Registry (MSR) supports two image-signing mechanisms. Cosign is the current recommended approach, while Docker Content Trust (DCT) is deprecated.

Mechanism Status Recommended use
Cosign Recommended All new and existing signing workflows on MSR 2.10.
Docker Content Trust Deprecated MSR 2.9 environments with existing DCT signatures that have not yet migrated to Cosign.