8000 llb: add checksum option to llb.Image by tonistiigi · Pull Request #6234 · moby/buildkit · GitHub
[go: up one dir, main page]

Skip to content

Conversation

tonistiigi
Copy link
Member

This allows images to be pulled by tag and then
checked against the digest. If digest is added directly to the image reference, then tag is ignored.

This matches the behavior of llb.Git that was added in the previous release, where you can now check out a commit by SHA, or check out by reg, and then verify the SHA.

Main use case for this would be via source policy.

This allows images to be pulled by tag and then
checked against the digest. If digest is added directly
to the image reference, then tag is ignored.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
Copy link
Collaborator
@jsternberg jsternberg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm guessing that an integration test for this isn't possible yet because it's not integrated into the Dockerfile syntax. If that's correct, it looks good and I'll approve. If it's possible to do an integration test I'd like to see one.

@tonistiigi
Copy link
Member Author

There is integration test in client_test. There is no Dockerfile test as this is not Dockerfile feature.

@tonistiigi tonistiigi merged commit eb49527 into moby:master Sep 23, 2025
196 of 200 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants
0