sign

Documentation

Index

• func Verify(ctx *civ1.BuildContext, target, key string, offline bool) error
• func VerifyAny(ctx *civ1.BuildContext, target, dir string, offline bool) error

Functions

func Verify

func Verify(ctx *civ1.BuildContext, target, key string, offline bool) error

Verify validates that a given image has been signed by a given Cosign public key. It returns nil if the image is signed.

func VerifyAny

func VerifyAny(ctx *civ1.BuildContext, target, dir string, offline bool) error

VerifyAny validates that any Cosign public key in the given directory has signed a given image. Useful if you have multiple trusted authorities, and you want to prove that your image has been signed by any one of them.