Repository containing public signing keys for public images published by Docker
| Version | Status | |
|---|---|---|
| mcp/2 | enabled | mcp/2.pub |
| mcp/1 | disabled | mcp/1.pub |
To verify images use the following command:
# verify the signature on mcp/git:latest
$ COSIGN_REPOSITORY=mcp/signatures cosign verify mcp/git:latest \
--key https://raw.githubusercontent.com/docker/keyring/refs/heads/main/public/mcp/latest.pub | jq .