TRUST HAS A
CHAIN OF CUSTODY.
Start with one exact image. Follow its digest, publication signature, and original source record. The website and GitHub expose the same inventory; the evidence belongs to the selected artifact.
PIN THE DIGEST.
Choose a version and tier from a container page, then copy its full @sha256:… pull command. A timestamped tag helps discovery; the digest selects the exact bytes.
docker pull --platform linux/amd64 ghcr.io/foxtech-consulting/nginx@sha256:a180c03a4ee59c8a4cb23e8775d3008d9fa42c91fb59e94d27925f9abb0dfc19This example is the catalog's NGINX Secure 1.30.4 preview. Open its image record →
VERIFY THE PUBLICATION.
Where the record contains complete signed annotations, the container page generates a Cosign command for that exact digest. Require the recorded issuer, certificate identity, and every annotation, including a publisher revision when present.
The image's original build revision and the publication system's revision are distinct. A signature check alone does not establish qualification or suitability for your deployment.
Open NGINX's exact verification command →TRACE THE ORIGINAL SOURCE.
For source-bound images, verify the signed GitHub commit and source-manifest hash, then authenticate the matching SOURCE.json before checking its exported file hashes. Source tags map public snapshots to original GitLab revisions.
Legacy images without signed public source bindings keep that status. The latest source snapshot cannot authenticate their older image bytes or replace missing annotations.
Read the same verification instructions on GitHub ↗REVIEW THE LIMITS.
Anonymous download checks cover the manifest, configuration, and all referenced layers. Those checks do not execute the runtime or repeat cryptographic signature verification. Recorded findings and CI signature provenance are shown separately.
Publication jobs and retained evidence may require GitLab access. All listed downloads are engineering previews for Linux/AMD64; none is declared generally available or FIPS-qualified by this catalog.
EXPLORE CONTAINERS →Catalog inventory record updated Oct 16, 2026, 11:39 AM EDT. Individual image and blob checks retain their original timestamps. This website uses a pinned GitHub snapshot. These checks are recorded evidence, not new scans or downloads performed by this page.