apiVersion: mirror.quorate.dev/v1alpha1
kind: MirroredImage
metadata:
  name: nginx
  namespace: mirrored-image
spec:
  upstream: cgr.dev/chainguard/nginx
  policy:
    rejectAtOrAbove: Critical
  digests:
    - digest: sha256:c3e810caa72b130c880f750986c2bab5ea7ca7ad03365ea562718be77d7d7c2e