Moby Client 0.5.0: New endpoint for image attestations
securityengineer
feature
The Moby client has released version 0.5.0, introducing a new `/images/{name}/attestations` endpoint. This feature allows users to retrieve in-toto attestation statements, including SLSA provenance and SPDX SBOM, directly from the Docker daemon. This change benefits developers and security teams by streamlining the process of accessing critical image metadata, reducing the need for extra registry calls.
Read the original announcement →
https://github.com/moby/moby/releases/tag/client/v0.5.0
Related releases
- Docker v29.7.1 addresses image pull and CopyToContainer regressions Docker Engine Releases ·
- Docker 29.7.0: Embedded containerd, security fix, and numerous enhancements Docker Engine Releases ·
- Moby Client v0.5.1: Fixes for service platforms and query arguments Docker Engine Releases ·
- Docker Engine v29.6.2: Security fixes and dependency updates Docker Engine Releases ·
- Docker Compose v5.2.0 releases with new reconciliation algorithm Docker Compose Releases ·
- Docker Engine 29.6.1 addresses security vulnerabilities and updates components Docker Engine Releases ·