diff --git a/docs/shared-docker.asciidoc b/docs/shared-docker.asciidoc index d8bb0528cf7..f783b5ef108 100644 --- a/docs/shared-docker.asciidoc +++ b/docs/shared-docker.asciidoc @@ -39,12 +39,21 @@ docker pull {dockerimage} . Verify the Docker image: + ["source", "sh", subs="attributes"] ------------------------------------------------- +---- wget https://artifacts.elastic.co/cosign.pub -cosign verify --key cosign.pub {dockerimage}:{version} ------------------------------------------------- +cosign verify --key cosign.pub {dockerimage} +---- ++ +The `cosign` command prints the check results and the signature payload in JSON format: + -For details about this step, refer to {ref}/docker.html#docker-verify-signature[Verify the {es} Docker image signature] in the {es} documentation. +[source,sh,subs="attributes"] +---- +Verification for {dockerimage} -- +The following checks were performed on each of these signatures: + - The cosign claims were validated + - Existence of the claims in the transparency log was verified offline + - The signatures were verified against the specified public key +---- endif::[]