Changes between Version 1 and Version 2 of cypress/SingularityImageInspection

Timestamp:

09/01/2026 10:58:43 AM (3 days ago)

Author:

Carl Baribault

Comment:

Added links to Singularity, Apptainer docs

cypress/SingularityImageInspection

@@ +1 @@
+[[PageOutline]]
+
 = Inspecting a Singularity .sif file = 
 
@@ -5 +7 @@
 Inspection can identify suspicious or unexpected behavior, but '''such inspection doesn't necessarily guarantee that a container is free of malicious code'''. Trust is ultimately based on review, testing, and, ideally, verification of a signature from a trusted source.
 
-
 == Signed SIF Images ==
 
 A signed '''.sif''' file allows users to verify that the image has not changed since it was approved and signed by a trusted source. Verification identifies the signer and confirms image integrity, but it does not guarantee that the image is safe or free of malicious content. Users should still inspect and review container contents before execution.
 
-For more information, see the help messages for the following sub-commands.
+In general and if available, it's preferable to use a .sif image file that has been '''reviewed and signed by a trusted source'''.
+
+See also
+ * [https://docs.sylabs.io/guides/4.3/user-guide/signNverify.html Singularity User Guide: Signing and Verifying Containers]
+ * [https://apptainer.org/docs/user/1.1/signNverify.html Apptainer User Guide: Signing and Verifying Containers]
+
+== Inspecting the .sif file ==
+
+You can begin to inspect a .sif file with the sub-commands mentioned below.
+
+Also, for more information, see the help messages for the following sub-commands.
 
  1. '''singularity sign --help''' # sign a .sif file
@@ -18 +29 @@
 
 In the following we assume that you've already entered an idev session and loaded the module singularity/3.9.0.
-
 
 {{{