update

kaznak · Dec 12, 2023 · e616df8 · e616df8
1 parent f12cf4c
commit e616df8
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -8,7 +8,11 @@ on:
 
 env:
   IMAGE_REPOSITORY_DIR: "ghcr.io/${{ github.repository_owner }}"
-  DOCKER_CONTENT_TRUST: 1
+  DOCKER_CONTENT_TRUST: 0
+  # CIS-DI-0005 recommends enable DOCKER_CONTENT_TRUST, but I disabled it becase of:
+  # Set up QEMU(docker/setup-qemu-action@v3It) raises
+  # # /usr/bin/docker pull tonistiigi/binfmt:latest
+  # # Error: remote trust data does not exist for docker.io/tonistiigi/binfmt: notary.docker.io does not have trust data for docker.io/tonistiigi/binfmt
 
 jobs:
   generate-jobs: