diff --git a/engine/security/trust/content_trust.md b/engine/security/trust/content_trust.md index 0ef505081c..21ffcd0b4c 100644 --- a/engine/security/trust/content_trust.md +++ b/engine/security/trust/content_trust.md @@ -183,7 +183,7 @@ The signature verification feature is configured in the Docker daemon configurat trust-pinning:library-images - This option pins the official libraries (docker.io/library/*<\code>) to the hard-coded Docker official images root key. DCT trusts the official images by default. This is in addition to whatever images are specified by trust-pinning:root-keys<\code>. If `trustpinning:root-keys` specifies a key mapping for docker.io/library/*, those keys will be preferred for trust pinning. Otherwise, if a more general docker.io/* or * are specified, the official images key will be preferred. + This option pins the official libraries (docker.io/library/*) to the hard-coded Docker official images root key. DCT trusts the official images by default. This is in addition to whatever images are specified by trust-pinning:root-keys<\code>. If `trustpinning:root-keys` specifies a key mapping for docker.io/library/*, those keys will be preferred for trust pinning. Otherwise, if a more general docker.io/* or * are specified, the official images key will be preferred. allow-expired-trust-cache