doc: add oci-docs [skip ci]

Signed-off-by: Christian Kotzbauer <[email protected]>
ckotzbauer · May 17, 2022 · 5601c36 · 5601c36
1 parent 4a53081
commit 5601c36
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -167,6 +167,15 @@ dev-cluster
                     │   sbom.json
 ```
 
+#### OCI-Registry
+
+In this mode the operator will generate a SBOM and store it into an OCI-Registry. The SBOM then can be processed by cosign, Kyverno
+or any other tool. E.g.:
+```bash
+COSIGN_REPOSITORY=<yourregistry> cosign download sbom <your full image digest>
+```
+
+
 ## Job-Images
 
 If you don't want to use Syft to analyze your images, you can give the Job-Image feature a try. The operator creates a Kubernetes-Job