yamlsign

Documentation

Index

• Constants
• func FetchSignedYamlPayload(ctx context.Context, payloadPath string) (*cosign.SignedPayload, error)
• func FetchYamlContent(payloadPath string) (map[interface{}]interface{}, error)
• func VerifyPayload(ctx context.Context, co *cosign.CheckOpts, payloadJson []byte, ...) (*cosign.SignedPayload, error)
• func VerifyYaml(ctx context.Context, co *cosign.CheckOpts, payloadPath string) (*cosign.SignedPayload, error)
• func WriteYamlContent(signature []byte, pemBytes []byte, bundleJson []byte, ...) error

Constants

const IntegrityShieldAnnotationBundle = "integrityshield.io/bundle"

const IntegrityShieldAnnotationCertificate = "integrityshield.io/certificate"

const IntegrityShieldAnnotationMessage = "integrityshield.io/message"

const IntegrityShieldAnnotationSignature = "integrityshield.io/signature"

Functions

func FetchSignedYamlPayload

func FetchSignedYamlPayload(ctx context.Context, payloadPath string) (*cosign.SignedPayload, error)

func FetchYamlContent

func FetchYamlContent(payloadPath string) (map[interface{}]interface{}, error)

func VerifyPayload

func VerifyPayload(ctx context.Context, co *cosign.CheckOpts, payloadJson []byte, sp *cosign.SignedPayload) (*cosign.SignedPayload, error)

func VerifyYaml

func VerifyYaml(ctx context.Context, co *cosign.CheckOpts, payloadPath string) (*cosign.SignedPayload, error)

Verify does all the main cosign checks in a loop, returning validated payloads. If there were no payloads, we return an error.

func WriteYamlContent

func WriteYamlContent(signature []byte, pemBytes []byte, bundleJson []byte, mPayload map[interface{}]interface{}, payloadPath string) error