"Today, Chainguard announced that it has become a Docker Verified Publisher (DVP)"
Anyone know how that works? Does Chainguard need to pay Docker for this? What does the verification process look like?
Anyone know how that works? Does Chainguard need to pay Docker for this? What does the verification process look like?
[1] https://docs.docker.com/trusted-content/dvp-program/
Explains perks and Docker Hub analytics features, but doesn't explain requirements. It does link to ...
[2] https://www.docker.com/partners/programs/
a sign up page that entices you to fill out a contact form if you want to learn more. And links to 2 new pages (and [1]) at the bottom:
[3] https://www.docker.com/press-release/docker-expands-trusted-...
the first of which is a press release explaining the value of the program.
[4] https://www.docker.com/blog/docker-verified-publisher-truste...
The second is this blog post which highlights trust and again Docker Hub features (e.g. rate limit removal, metrics, badging) and links back to [2] for more details.
The third link is [1].
So, I'm still left curious about the grandparent comment's questions. It seems these pages are sparse on what the verification process looks like and if it might just be a "pay to play" relationship.