Which pattern syntax will add all images to a trusted images rule within a registry?

Question

Options

• A*.acme.com
• Bacme/*
• Cacme.com/myrepo/allimages:/*
• Dregistry.acme.com/*

• A
  9% (2)
• C
  5% (1)
• D
  86% (19)

Explanation

Option D (registry.acme.com/*) is correct because trusted image rules require a fully qualified registry hostname followed by a wildcard path - this matches all images hosted under that specific registry. The /* wildcard covers every repository and tag within registry.acme.com.

• A (*.acme.com) uses a subdomain wildcard, not a registry image path - it matches hostnames, not image paths within a registry.
• B (acme/*) lacks a hostname entirely; this resembles a Docker Hub shorthand and doesn't reference a proper registry URL.
• C (acme.com/myrepo/allimages:/*) is too specific - it targets one repository (myrepo/allimages) rather than the entire registry, and the :/* tag syntax is invalid.

Memory tip: Think "full address + wildcard path" - just like a URL allowlist, you need the complete registry hostname first, then /* to sweep up everything beneath it. If the pattern doesn't start with a valid hostname, it won't match a real registry.

No community discussion yet for this question.