payload

Documentation

Overview

Package payload contains types and utilities related to the Cosign signature format.

Package payload defines a container image

Index

• Constants
• type Cosign
  • func (p Cosign) MarshalJSON() ([]byte, error)
  • func (p Cosign) SimpleContainerImage() SimpleContainerImage
  • func (p *Cosign) UnmarshalJSON(data []byte) error
• type Critical
• type Identity
• type Image
• type SimpleContainerImage

Constants

const CosignSignatureType = "cosign container image signature"

CosignSignatureType is the value of `critical.type` in a SimpleContainerImage payload.

Types

type Cosign

type Cosign struct {
	Image       name.Digest
	Annotations map[string]interface{}
}

Cosign describes a container image signed using Cosign

func (Cosign) MarshalJSON

func (p Cosign) MarshalJSON() ([]byte, error)

MarshalJSON marshals the container signature into a []byte of JSON data

func (Cosign) SimpleContainerImage

func (p Cosign) SimpleContainerImage() SimpleContainerImage

SimpleContainerImage returns information about a container image in the github.com/containers/image/signature format

func (*Cosign) UnmarshalJSON

func (p *Cosign) UnmarshalJSON(data []byte) error

UnmarshalJSON unmarshals []byte of JSON data into a container signature object

type Critical

type Critical struct {
	Identity Identity `json:"identity"` // Identity claimed identity of the image
	Image    Image    `json:"image"`    // Image identifies the container that the signature applies to
	Type     string   `json:"type"`     // Type must be 'atomic container signature'
}

Critical data critical to correctly evaluating the validity of a signature

type Identity

type Identity struct {
	DockerReference string `json:"docker-reference"` // DockerReference is a reference used to refer to or download the image
}

Identity is the claimed identity of the image

type Image

type Image struct {
	DockerManifestDigest string `json:"docker-manifest-digest"` // DockerManifestDigest the manifest digest of the signed container image
}

Image identifies the container image that the signature applies to

type SimpleContainerImage

type SimpleContainerImage struct {
	Critical Critical               `json:"critical"` // Critical data critical to correctly evaluating the validity of the signature
	Optional map[string]interface{} `json:"optional"` // Optional optional metadata about the image
}

SimpleContainerImage describes the structure of a basic container image signature payload, as defined at: https://github.com/containers/image/blob/master/docs/containers-signature.5.md#json-data-format