HARDENED
Return
argocd-repo-server

argocd-repo-server

latest

A Kubernetes component of Argo CD responsible for rendering and generating Kubernetes manifests from Git repositories, supporting Helm, Kustomize, and other configuration management tools to enable declarative GitOps deployments.

Getting Started

To pull the image:

docker pull registry.hardened.eu/library/argocd-repo-server:latest

Verifying Image Signatures

All Hardened B.V. images are signed using cosign. You can verify the signature using the following steps:

Save the public key:

cat >hardened.pub <<EOL
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEbxhUFlXkIIbDzdRAR9rc6kDPNb+k
J48lhqqlOMyiq3jkbKXNj2sEFMduFlNh63MrZA59PKf4TjS1AiCrvaFXNA==
-----END PUBLIC KEY-----
EOL

Verify the image signature:

cosign verify --key hardened.pub registry.hardened.eu/library/argocd-repo-server:latest

The verification will show the signature details and confirm the image’s authenticity.

To verify the SBOM, run the following command:

cosign verify-attestation --type spdxjson --key hardened.pub registry.hardened.eu/library/argocd-repo-server:latest

To download the SBOM, run the same command and decode it:

cosign verify-attestation --type spdxjson --key hardened.pub registry.hardened.eu/library/argocd-repo-server:latest | jq -r .payload | base64 -d | jq -r .predicate > argocd-repo-server-spdx.json

Trademarks

This software is packaged by Hardened B.V. All trademarks are property of their respective owners. Use of these images does not imply any affiliation or endorsement.