# OCI registry

Published articles for OCI registry.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Securely Signing WebAssembly Components with Cosign (OIDC)

DevFeed: [Securely Signing WebAssembly Components with Cosign (OIDC)](<https://devfeed.tech/articles/securely-signing-webassembly-components-with-cosign-oidc-15432.md>)

Original publisher: [Read original article](<https://wasmcloud.com/blog/2025-09-02-securely-signing-wasm-components-with-cosign-oidc/>)

Author: Liam Randall

Published: 2025-09-02T00:00:00Z

Content type: tutorial

Language: en

Sources: [wasmCloud Blog](<https://devfeed.tech/sources/wasmcloud-blog.md>)

Topics: [WebAssembly](<https://devfeed.tech/topics/web-assembly.md>), [sigstore](<https://devfeed.tech/topics/sigstore.md>), [GitHub Container Registry](<https://devfeed.tech/topics/github-container-registry.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [Rust](<https://devfeed.tech/topics/rust.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [cli](<https://devfeed.tech/tags/cli.md>), [cosign](<https://devfeed.tech/tags/cosign.md>), [github-container-registry](<https://devfeed.tech/tags/github-container-registry.md>), [integrity](<https://devfeed.tech/tags/integrity.md>), [oci-registry](<https://devfeed.tech/tags/oci-registry.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [registry](<https://devfeed.tech/tags/registry.md>), [security](<https://devfeed.tech/tags/security.md>), [signing](<https://devfeed.tech/tags/signing.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>), [verify](<https://devfeed.tech/tags/verify.md>), [wasi](<https://devfeed.tech/tags/wasi.md>), [wasm-components](<https://devfeed.tech/tags/wasm-components.md>), [wasmcloud](<https://devfeed.tech/tags/wasmcloud.md>), [webassembly](<https://devfeed.tech/tags/webassembly.md>), [webassembly-wasmcloud-security-cosign-oidc-signing-oci-registry-supply-chain-security-wasi-wasm-comp](<https://devfeed.tech/tags/webassembly-wasmcloud-security-cosign-oidc-signing-oci-registry-supply-chain-security-wasi-wasm-comp.md>)

### AI overview

A tutorial showing how to build a Rust-based WebAssembly component, sign it with Sigstore Cosign using OIDC identity, push it to GitHub Container Registry, and verify it before execution.

### Source excerpt

Build, sign, and verify WebAssembly component artifacts using Sigstore's cosign with OIDC identity--secure, registry-native signatures for wasmCloud.

## Deploying applications to Fly.io without Docker

DevFeed: [Deploying applications to Fly.io without Docker](<https://devfeed.tech/articles/deploying-applications-to-fly-io-without-docker-38534.md>)

Original publisher: [Read original article](<https://msfjarvis.dev/posts/deploying-applications-to-flyio-without-docker/>)

Author: Harsh Shandilya

Published: 2024-10-05T06:30:00Z

Content type: tutorial

Language: en

Sources: [Posts on Harsh Shandilya](<https://devfeed.tech/sources/posts-on-harsh-shandilya.md>)

Topics: [fly.io](<https://devfeed.tech/topics/fly-io.md>), [fly](<https://devfeed.tech/topics/fly.md>), [Skopeo](<https://devfeed.tech/topics/skopeo.md>), [Docker Image](<https://devfeed.tech/topics/docker-image.md>), [docker registry](<https://devfeed.tech/topics/docker-registry.md>), [Nix](<https://devfeed.tech/topics/nix.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [Deployment](<https://devfeed.tech/topics/deployment.md>)

Tags: [cli](<https://devfeed.tech/tags/cli.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [docker](<https://devfeed.tech/tags/docker.md>), [docker-image](<https://devfeed.tech/tags/docker-image.md>), [docker-registry](<https://devfeed.tech/tags/docker-registry.md>), [fly](<https://devfeed.tech/tags/fly.md>), [fly-io](<https://devfeed.tech/tags/fly-io.md>), [nix](<https://devfeed.tech/tags/nix.md>), [oci-registry](<https://devfeed.tech/tags/oci-registry.md>), [skopeo](<https://devfeed.tech/tags/skopeo.md>)

### AI overview

A guide to deploying applications on Fly.io without installing Docker locally. It explains how to use Nix to build an OCI image and Skopeo to copy the image archive to Fly.io's registry before deployment.

### Source excerpt

A quick guide to deploying apps to Fly.io without a local Docker installation

## Announcing a Chainguard Image for OpenTF

DevFeed: [Announcing a Chainguard Image for OpenTF](<https://devfeed.tech/articles/announcing-a-chainguard-image-for-opentf-12873.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/announcing-a-chainguard-image-for-opentf>)

Published: 2023-09-06T00:00:00Z

Content type: release

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [foss](<https://devfeed.tech/topics/foss.md>), [Terraform](<https://devfeed.tech/topics/terraform.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [container](<https://devfeed.tech/tags/container.md>), [foss](<https://devfeed.tech/tags/foss.md>), [linux](<https://devfeed.tech/tags/linux.md>), [oci-registry](<https://devfeed.tech/tags/oci-registry.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [opentf](<https://devfeed.tech/tags/opentf.md>), [scanners](<https://devfeed.tech/tags/scanners.md>), [security](<https://devfeed.tech/tags/security.md>), [state](<https://devfeed.tech/tags/state.md>), [terraform](<https://devfeed.tech/tags/terraform.md>)

### AI overview

Chainguard announces a Chainguard Image for OpenTF, the open-source fork of Terraform created after HashiCorp's license changes. The image is available through Wolfi and Chainguard Images for Linux amd64 and arm64, with a 65 MB size and zero known CVEs according to supported scanners. The article also discusses planned state encryption and OCI registry support, plus future testing and Terraform plugin availability for OpenTF.

### Source excerpt

Discover how Chainguard for OpenTF bridges the open-source community, ensuring secure and efficient container ecosystem transitions.

## OCI announces upcoming changes for registries

DevFeed: [OCI announces upcoming changes for registries](<https://devfeed.tech/articles/oci-announces-upcoming-changes-for-registries-13193.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/oci-announces-upcoming-changes-for-registries>)

Published: 2023-07-13T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Containers](<https://devfeed.tech/topics/containers.md>), [API](<https://devfeed.tech/topics/api.md>), [JSON](<https://devfeed.tech/topics/json.md>)

Tags: [image-manifest](<https://devfeed.tech/tags/image-manifest.md>), [json](<https://devfeed.tech/tags/json.md>), [oci](<https://devfeed.tech/tags/oci.md>), [oci-registry](<https://devfeed.tech/tags/oci-registry.md>), [oci-v1-1](<https://devfeed.tech/tags/oci-v1-1.md>), [open-container-registry](<https://devfeed.tech/tags/open-container-registry.md>), [registry](<https://devfeed.tech/tags/registry.md>), [releases](<https://devfeed.tech/tags/releases.md>)

### AI overview

The Open Container Initiative announced upcoming changes in OCI Image and Distribution Specs v1.1. The changes include formalizing OCI Artifact handling, allowing manifests to reference other registry objects, and adding an API endpoint for discovering related objects.

### Source excerpt

The Open Container Initiative recently announced a list of major registry changes you can expect to see soon in OCI Image and Distribution Specs v1.1.

## Building towards OCI v1.1 support in cosign

DevFeed: [Building towards OCI v1.1 support in cosign](<https://devfeed.tech/articles/building-towards-oci-v1-1-support-in-cosign-12913.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/building-towards-oci-v1-1-support-in-cosign>)

Published: 2023-02-17T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [releases](<https://devfeed.tech/topics/releases.md>), [pull-requests](<https://devfeed.tech/topics/pull-requests.md>), [Maintainers](<https://devfeed.tech/topics/maintainers.md>)

Tags: [cosign](<https://devfeed.tech/tags/cosign.md>), [http](<https://devfeed.tech/tags/http.md>), [maintainers](<https://devfeed.tech/tags/maintainers.md>), [manifest](<https://devfeed.tech/tags/manifest.md>), [oci](<https://devfeed.tech/tags/oci.md>), [oci-registry](<https://devfeed.tech/tags/oci-registry.md>), [oci-v1-1](<https://devfeed.tech/tags/oci-v1-1.md>), [pull-requests](<https://devfeed.tech/tags/pull-requests.md>), [registry](<https://devfeed.tech/tags/registry.md>), [releases](<https://devfeed.tech/tags/releases.md>), [security](<https://devfeed.tech/tags/security.md>), [sha256](<https://devfeed.tech/tags/sha256.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>)

### AI overview

The article discusses progress toward OCI v1.1 and its implications for cosign. It explains how OCI proposals and approved pull requests address relationships between objects in registries, and introduces the Referrers Tag Schema as a more interoperable alternative to cosign's existing tag-based approach.

### Source excerpt

Learn about OCI, which is inching closer to a v1.1 release which provides official guidance on how to connect things in a registry.