internal

Documentation

Index

• type Option
• type SigstoreSigner
  • func (s *SigstoreSigner) Close() error
  • func (s *SigstoreSigner) ProgressMessage() string
  • func (s *SigstoreSigner) SignImageManifest(ctx context.Context, m []byte, dockerReference reference.Named) (signature.Signature, error)

Types

type Option

type Option func(*SigstoreSigner) error

type SigstoreSigner

type SigstoreSigner struct {
	PrivateKey       sigstoreSignature.Signer // May be nil during initialization
	SigningKeyOrCert []byte                   // For possible Rekor upload; always initialized together with PrivateKey

	// Fulcio results to include
	FulcioGeneratedCertificate      []byte // Or nil
	FulcioGeneratedCertificateChain []byte // Or nil

	// Rekor state
	RekorUploader func(ctx context.Context, keyOrCertBytes []byte, signatureBytes []byte, payloadBytes []byte) ([]byte, error) // Or nil
}

SigstoreSigner is a signer.SignerImplementation implementation for sigstore signatures. It is initialized using various closures that implement Option, sadly over several subpackages, to decrease the dependency impact.

func (*SigstoreSigner) Close

func (s *SigstoreSigner) Close() error

func (*SigstoreSigner) ProgressMessage

func (s *SigstoreSigner) ProgressMessage() string

ProgressMessage returns a human-readable sentence that makes sense to write before starting to create a single signature.

func (*SigstoreSigner) SignImageManifest

func (s *SigstoreSigner) SignImageManifest(ctx context.Context, m []byte, dockerReference reference.Named) (signature.Signature, error)

SignImageManifest creates a new signature for manifest m as dockerReference.