fix: extend signature verification and docs to cover Docker Hub nextcloud/all-in-one image

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/c9cb8e66-7b4f-4e38-ba33-b9568de6d421

Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-04-27 01:20:12 +00:00
committed by GitHub
parent 2a2e69f047
commit c962fcc10c
2 changed files with 15 additions and 5 deletions

View File

@@ -559,9 +559,10 @@ readonly class DockerActionManager {
}
private function verifyImageSignature(string $imageName): void {
// Only verify images from the nextcloud-releases ghcr.io registry,
// as those are the images signed via the CI workflows in PR #97.
if (!str_starts_with($imageName, 'ghcr.io/nextcloud-releases/')) {
// Only verify images from the nextcloud-releases ghcr.io registry or
// the nextcloud/all-in-one Docker Hub image, as those are the images
// signed via the CI workflows in PR #97.
if (!str_starts_with($imageName, 'ghcr.io/nextcloud-releases/') && !str_starts_with($imageName, 'nextcloud/all-in-one')) {
return;
}