1
0
mirror of synced 2026-10-23 00:49:02 +03:00
Files
cosign/doc/cosign_save.md
Ogulcan Aydogan 6d39eb9e98 docs: drop trailing periods from cobra Short descriptions (#4944)
The Short command descriptions were inconsistent: most followed the cobra
convention of a short phrase with no trailing period, but sixteen ended in
a period. Standardize the outliers to match the period-free majority and
regenerate the Markdown docs.

piv-tool and pkcs11-tool Short fields are addressed in separate changes.

Signed-off-by: Ogulcan Aydogan <ogulcanaydogan@hotmail.com>
2026-06-12 11:01:58 -07:00

2.0 KiB
Generated

cosign save

Save the container image and associated signatures to disk at the specified directory

Synopsis

Save the container image and associated signatures to disk at the specified directory.

cosign save [flags]

Examples

  cosign save --dir <path to directory> <IMAGE>

Options

      --allow-http-registry           whether to allow using HTTP protocol while connecting to registries. Don't use this for anything but testing
      --allow-insecure-registry       whether to allow insecure connections to registries (e.g., with expired or self-signed TLS certificates). Don't use this for anything but testing
      --dir string                    path to dir where the signed image should be stored on disk
  -h, --help                          help for save
      --k8s-keychain                  whether to use the kubernetes keychain instead of the default keychain (supports workload identity).
      --registry-cacert string        path to the X.509 CA certificate file in PEM format to be used for the connection to the registry
      --registry-client-cert string   path to the X.509 certificate file in PEM format to be used for the connection to the registry
      --registry-client-key string    path to the X.509 private key file in PEM format to be used, together with the 'registry-client-cert' value, for the connection to the registry
      --registry-password string      registry basic auth password
      --registry-server-name string   SAN name to use as the 'ServerName' tls.Config field to verify the mTLS connection to the registry
      --registry-token string         registry bearer auth token
      --registry-username string      registry basic auth username

Options inherited from parent commands

      --output-file string   log output to a file
  -t, --timeout duration     timeout for commands (default 3m0s)
  -d, --verbose              log debug output

SEE ALSO

  • cosign - A tool for Container Signing, Verification and Storage in an OCI registry