Trust signal
This add-on ships as a signed OCI artifact. Each per-architecture bundle is signed with ed25519 against the ServiceRadar agent release trust root and verified by the agent before activation.
Signed OCI bundle
Pull the signed bundle from the ServiceRadar registry, then assign it to an agent from the control plane.
oras pull registry.carverauto.dev/serviceradar/serviceradar-addon-workload-identity:v1.4.30
Bundle digest: sha256:bfa8c8abeff28f688e5a7c2357b8b393de49d11ad5a7d76b43c12f3ad8aa1ebd
Signed artifacts
| Platform | Signature |
|---|---|
| linux/amd64 | Signed |
Capabilities
workload-identity
container-inventory
Platforms
linux