Skip to navigation
Security

Verify the Contents of Published OpenShell Images

View as Markdown

Published gateway and supervisor images carry one SPDX SBOM per platform as OCI attestations.

Stable releases publish rebuilt images under version tags such as 0.4.3. Promoting a prerelease preserves its commit-SHA image tags, which continue to identify the images used for qualification.

Inspect an Image

Read a platform’s document without pulling the image:

docker buildx imagetools inspect ghcr.io/nvidia/openshell/gateway:latest --format '{{ json (index .SBOM "linux/amd64").SPDX }}'

List the packages instead of the full document:

docker buildx imagetools inspect ghcr.io/nvidia/openshell/gateway:latest --format '{{ range (index .SBOM "linux/amd64").SPDX.packages }}{{ .name }}@{{ .versionInfo }}{{ println }}{{ end }}'

The same commands work for ghcr.io/nvidia/openshell/supervisor.

Coverage

Every SBOM lists the base-image packages. Release Dev, Release, and Pre-release images also list the Rust crates compiled into their OpenShell binary.

OpenShell also publishes minimal SLSA provenance. It records how BuildKit produced the image, including its source revision, build platform, and base-image materials, without the extra build parameters included by full provenance.