Update DVP overview (#15509)

* Update DVP overview

* fixed typos

* updated DVP benefits

* updated per review comments

* fix typo
This commit is contained in:
David Karlsson 2022-09-05 17:31:10 +02:00 committed by GitHub
parent fbd81ae57d
commit 7cc8e51bde
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 58 additions and 19 deletions

Binary file not shown.

Before

Width:  |  Height:  |  Size: 36 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 194 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 38 KiB

View File

@ -2,28 +2,67 @@
description: Docker Verified Publisher Program
title: Docker Verified Publisher Program
redirect_from:
- /docker-store/byol/
- /docker-store/certify-images/
- /docker-store/certify-plugins-logging/
- /docker-store/customer_faq/
- /docker-store/publisher_faq/
- /docker-store/trustchain/
- /docker-store/publish/
- /docker-hub/publish/publish/
- /docker-hub/publish/customer_faq/
- /docker-hub/publish/publisher_faq/
- /docker-hub/publish/certify-images/
- /docker-hub/publish/certify-plugins-logging/
- /docker-hub/publish/trustchain/
- /docker-hub/publish/byol/
- /docker-store/byol/
- /docker-store/certify-images/
- /docker-store/certify-plugins-logging/
- /docker-store/customer_faq/
- /docker-store/publisher_faq/
- /docker-store/trustchain/
- /docker-store/publish/
- /docker-hub/publish/publish/
- /docker-hub/publish/customer_faq/
- /docker-hub/publish/publisher_faq/
- /docker-hub/publish/certify-images/
- /docker-hub/publish/certify-plugins-logging/
- /docker-hub/publish/trustchain/
- /docker-hub/publish/byol/
---
The Docker Verified and Publisher Program enables Independent Software Vendors (ISVs), development tools vendors, and platform providers to distribute Dockerized content through Docker Hub.
The Verified Publisher Program provides several features and benefits to Docker
Hub publishers. The following perks are granted based on participation tier:
Development teams rely on Docker Hub for application components to build new applications. The Docker differentiated content programs like the [Docker Official Images](../official_images.md) and the Docker Verified Publishers provide developers with validation that these images come from trusted sources, reducing the risk of pulling malicious images from the impostor repositories.
- Verified publisher badge
- Insights and analytics
- Vulnerability scanning
- Additional Docker Business seats
- Removal of rate limiting for developers
- Co-marketing opportunities
The **Verified Publisher** badge included on the Docker Hub repositories indicates that these repositories are published by Docker partners that are part of the Verified Publisher program, and are qualified to be included in the developer secure supply chain. You can limit your repository search, when you use the 'Verified Publisher' filter.
## Verified publisher badge
To find out more about the Docker Verified and Publisher Program and to sign up for a partnership with Docker, visit the [Docker Verified Publisher Program](https://www.docker.com/partners/programs){:target="_blank" rel="noopener" class="_"} page.
The verified publisher badge signals high quality, and trust, to developers.
Images with this badge are verified as high quality, and the content can be
trusted.
![Verification Badge](images/VerifiedPublisherBadge.png)
![Docker, Inc. org with a verified publisher badge](./images/verified-publisher-badge.png)
## Insights and analytics
The [insights and analytics](/docker-hub/publish/insights-analytics){:
target="blank" rel="noopener" class=""} service provides usage metrics for how
the community uses your Docker images, and grants you insight into your user's
behavior.
![The insights and analytics tab on the Docker Hub website](./images/insights-and-analytics-tab.png)
Select the time span you want to view analytics data, and export the data in
either a summary or raw format. The summary format shows you image pulls per
tag, and the raw format lists information about every image pull for the
selected time span. Data points include tag, type of pull, user geolocation,
client tool (user agent), and more.
## Vulnerability scanning
Automatic vulnerability scanning using Snyk for images published to Docker Hub.
Scanning images ensures that the published content is secure, and underlines to
developers that it can be trusted. Scanning can be enabled on a per-repository
basis, refer to [vulnerability scanning](/docker-hub/vulnerability-scanning/){:
target="blank" rel="noopener" class=""} for more information about how to use
it.
## Who's eligible to become a verified publisher?
Any independent software vendor who distributes software on Docker Hub can join
the Verified Publisher Program. Find out more by heading to the
[Docker Verified Publisher Program](https://www.docker.com/partners/programs){:target="_blank"
rel="noopener" class="_"} page.