# Signed node-red docker images?

**URL:** <https://discourse.nodered.org/t/signed-node-red-docker-images/51133>\
**Category:** General\
**Created:** [17 September 2021 06:13 UTC](https://discourse.nodered.org/t/signed-node-red-docker-images/51133 "2021-09-17T06:13:41Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![michael.r](https://avatars.discourse-cdn.com/v4/letter/m/3d9bf3/32.png) [@michael.r](https://discourse.nodered.org/u/michael.r)\
**Post date:** [17 September 2021 06:13 UTC](https://discourse.nodered.org/t/signed-node-red-docker-images/51133/1 "2021-09-17T06:13:41Z")

</div>

I’m using the nodered/node-red image and I’m wondering if it's being signed anywhere I can check.

> **[Content trust in Docker](https://docs.docker.com/engine/security/trust/)**
>
> Enabling content trust in Docker

planning on enabling DOCKER\_CONTENT\_TRUST

---

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [17 September 2021 06:32 UTC](https://discourse.nodered.org/t/signed-node-red-docker-images/51133/2 "2021-09-17T06:32:45Z")

</div>

No it isn't. It is something on the to-do list, but I'm not sure where it has got to.

---

<div class="post-metadata">

**Author:** ![michael.r](https://avatars.discourse-cdn.com/v4/letter/m/3d9bf3/32.png) [@michael.r](https://discourse.nodered.org/u/michael.r)\
**Post date:** [17 September 2021 06:44 UTC](https://discourse.nodered.org/t/signed-node-red-docker-images/51133/3 "2021-09-17T06:44:50Z")

</div>

righto, thanks for the info

---

<div class="post-metadata">

**Author:** ![hardillb](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/hardillb/32/12373_2.png) [@hardillb](https://discourse.nodered.org/u/hardillb)\
**Post date:** [17 September 2021 17:52 UTC](https://discourse.nodered.org/t/signed-node-red-docker-images/51133/4 "2021-09-17T17:52:27Z")

</div>

I looked at this for the v2.0.0 release and Docker's own tools for GitHub Actions don't support doing it for multi-platform manifest builds generated by `docker buildx`

If you can find doc for how to do this without having to jump thought many many hoops I'll happily have another look.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [16 November 2021 17:52 UTC](https://discourse.nodered.org/t/signed-node-red-docker-images/51133/5 "2021-11-16T17:52:34Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.