Trusted Repository

TrustedRepository

Defines a repository that is explicitly trusted by the organization.

Acts as a security-policy marker declaring that artifacts (container images, packages) originating from this repository are verified and safe to use within platform deployment pipelines. Typically declared as a child of a registry manifest to enforce software supply-chain integrity.

Property	Type	Description
apiVersion	string	API schema version. Pins the manifest to a specific schema contract for backward-compatibility. Must be the constant lowops.manifests.v1.
kind	string	Resource kind discriminator. Identifies this document as a TrustedRepository so the engine routes it to the correct defaulter, validator, computer, and executor. Must be the constant TrustedRepository.
metadata	map	Classification labels and graph linkage. Free-form key/value pairs used to classify the manifest. Certain reserved keys (e.g. name, organization) are read by the engine to resolve this manifest's identity and its parent registry in the dependency graph.
spec	Spec	Desired trusted-repository declaration. The authoritative, user-authored specification for this trusted repository. See Spec.

Spec

Trusted repository declaration.

Configuration describing the trusted artifact source. The manifest provisions no infrastructure; it exists as a policy marker in the dependency graph.

Property	Type	Description
description	string	Human-readable description of this trusted repository. Optional free text describing the repository and why it is trusted. Not propagated onto any provisioned resource; it is informational only and used as context by AI assistants when reasoning about the manifest.