attestation

package

Go to main page

Versions in this module

v0

v0.6.8

Oct 23, 2024

v0.6.7

Oct 17, 2024

Changes in this version

type VSAVerifier

+ Version VerifierVersion

+ type VerifierVersion map[string]string

+ func GetVerifierVersion(fetcher version.Fetcher) (VerifierVersion, error)

v0.6.6

Oct 15, 2024

Changes in this version

+ type EnvelopeReference struct

+ ResourceDescriptor *ResourceDescriptor

+ type ResourceDescriptor struct

+ Digest map[string]string

+ MediaType string

+ URI string

v0.6.5

Oct 2, 2024

v0.6.4

Oct 1, 2024

v0.6.3

Sep 30, 2024

v0.6.2

Sep 27, 2024

v0.6.1

Sep 19, 2024

v0.6.0

Sep 19, 2024

Changes in this version

+ const RekorTransparencyLogKind

+ func WithLogVerifierFactory(factory LogVerifierFactory) func(*verifier)

+ func WithSignatureVerifierFactory(factory SignatureVerifierFactory) func(*verifier)

+ func WithTUFDownloader(tufDownloader tuf.Downloader) func(*verifier)

type KeyMetadata

+ func (km *KeyMetadata) ParsedKey() (crypto.PublicKey, error)

+ type LogVerifierFactory func(ctx context.Context, opts *VerifyOptions) (tlog.TransparencyLog, error)

+ type SignatureVerifierFactory func(ctx context.Context, publicKey crypto.PublicKey, opts *VerifyOptions) (dsse.Verifier, error)

type SigningOptions

+ TransparencyLog tlog.TransparencyLog

+ type TransparencyLogKind string

+ type Verifier interface

+ GetLogVerifier func(ctx context.Context, opts *VerifyOptions) (tlog.TransparencyLog, error)

+ GetSignatureVerifier func(ctx context.Context, publicKey crypto.PublicKey, opts *VerifyOptions) (dsse.Verifier, error)

+ VerifyLog func(ctx context.Context, keyMeta *KeyMetadata, data []byte, sig *Signature, ...) error

+ VerifySignature func(ctx context.Context, publicKey crypto.PublicKey, data []byte, signature []byte, ...) error

+ func NewVerfier(options ...func(*verifier)) (Verifier, error)

type VerifyOptions

+ TransparencyLog TransparencyLogKind

v0.5.2

Sep 11, 2024

v0.5.1

Sep 9, 2024

v0.5.0

Sep 9, 2024

v0.4.4

Sep 5, 2024

v0.4.3

Sep 4, 2024

Changes in this version

+ const AttestationManifestType

+ const DockerDSSEExtKind

+ const DockerReferenceDigest

+ const DockerReferenceType

+ const InTotoPredicateType

+ const InTotoReferenceLifecycleStage

+ const LifecycleStageExperimental

+ const OCIDescriptorDSSEMediaType

+ const RekorTLExtKind

+ const VSAPredicateType

+ func DSSEMediaType(predicateType string) (string, error)

+ func ToVSAResourceURI(sub intoto.Subject) (string, error)

+ func UpdateIndexImages(idx v1.ImageIndex, manifest []*Manifest, ...) (v1.ImageIndex, error)

+ func ValidPayloadType(payloadType string) bool

+ func VerifyDSSE(ctx context.Context, env *Envelope, opts *VerifyOptions) ([]byte, error)

+ func WithReferrersRepo(repo string) func(*ReferrersResolver) error

+ func WithReplacedLayers(replaceLayers bool) func(*ManifestImageOptions) error

+ func WithoutSubject(skipSubject bool) func(*ManifestImageOptions) error

+ type AnnotatedStatement struct

+ Annotations map[string]string

+ InTotoStatement *intoto.Statement

+ OCIDescriptor *v1.Descriptor

+ func ExtractAnnotatedStatements(path string, mediaType string) ([]*AnnotatedStatement, error)

+ func ExtractStatementsFromIndex(idx v1.ImageIndex, mediaType string) ([]*AnnotatedStatement, error)

+ type DockerDSSEExtension struct

+ TL *DockerTLExtension

+ type DockerTLExtension struct

+ Data any

+ Kind string

+ type Envelope struct

+ Payload string

+ PayloadType string

+ Signatures []*Signature

+ func ExtractEnvelopes(manifest *Manifest, predicateType string) ([]*Envelope, error)

+ func SignDSSE(ctx context.Context, payload []byte, signer dsse.SignerVerifier, ...) (*Envelope, error)

+ type Extension struct

+ Ext *DockerDSSEExtension

+ Kind string

+ type KeyMetadata struct

+ Distrust bool

+ From time.Time

+ ID string

+ PEM string

+ SigningFormat string

+ Status string

+ To *time.Time

+ type Keys []*KeyMetadata

+ type KeysMap map[string]*KeyMetadata

+ type Layer struct

+ Annotations map[string]string

+ Layer v1.Layer

+ Statement *intoto.Statement

+ type LayoutResolver struct

+ func NewOCILayoutResolver(src *oci.ImageSpec) (*LayoutResolver, error)

+ func (r *LayoutResolver) Attestations(_ context.Context, predicateType string) ([]*Envelope, error)

+ func (r *LayoutResolver) ImageDescriptor(_ context.Context) (*v1.Descriptor, error)

+ func (r *LayoutResolver) ImageName(_ context.Context) (string, error)

+ func (r *LayoutResolver) ImagePlatform(_ context.Context) (*v1.Platform, error)

+ type Manifest struct

+ OriginalDescriptor *v1.Descriptor

+ OriginalLayers []*Layer

+ SignedLayers []*Layer

+ SubjectDescriptor *v1.Descriptor

+ SubjectName string

+ func FetchManifest(ctx context.Context, image string, platform *v1.Platform) (*Manifest, error)

+ func ManifestsFromIndex(index v1.ImageIndex) ([]*Manifest, error)

+ func NewManifest(subject *v1.Descriptor) (*Manifest, error)

+ func (manifest *Manifest) Add(ctx context.Context, signer dsse.SignerVerifier, statement *intoto.Statement, ...) error

+ func (manifest *Manifest) BuildImage(options ...func(*ManifestImageOptions) error) (v1.Image, error)

+ func (manifest *Manifest) BuildReferringArtifacts() ([]v1.Image, error)

+ type ManifestImageOptions struct

+ type MockRegistryResolver struct

+ ImageNameStr string

+ Subject *v1.Descriptor

+ func (r *MockRegistryResolver) ImageDescriptor(_ context.Context) (*v1.Descriptor, error)

+ func (r *MockRegistryResolver) ImageName(_ context.Context) (string, error)

+ type MockResolver struct

+ DescriptorFn func() (*v1.Descriptor, error)

+ Envs []*Envelope

+ Image string

+ ImangeNameFn func() (string, error)

+ PlatformFn func() (*v1.Platform, error)

+ func (r MockResolver) Attestations(_ context.Context, _ string) ([]*Envelope, error)

+ func (r MockResolver) ImageDescriptor(_ context.Context) (*v1.Descriptor, error)

+ func (r MockResolver) ImageName(_ context.Context) (string, error)

+ func (r MockResolver) ImagePlatform(_ context.Context) (*v1.Platform, error)

+ type Options struct

+ Attach bool

+ NoReferrers bool

+ ReferrersRepo string

+ type ReferrersResolver struct

+ func NewReferrersResolver(src oci.ImageDetailsResolver, options ...func(*ReferrersResolver) error) (*ReferrersResolver, error)

+ func (r *ReferrersResolver) Attestations(ctx context.Context, predicateType string) ([]*Envelope, error)

+ type RegistryResolver struct

+ func NewRegistryResolver(src *oci.RegistryImageDetailsResolver) (*RegistryResolver, error)

+ func (r *RegistryResolver) Attestations(ctx context.Context, predicateType string) ([]*Envelope, error)

+ type Resolver interface

+ Attestations func(ctx context.Context, mediaType string) ([]*Envelope, error)

+ type Signature struct

+ Extension *Extension

+ KeyID string

+ Sig string

+ type SigningOptions struct

+ SkipTL bool

+ type VSAInputAttestation struct

+ Digest map[string]string

+ MediaType string

+ type VSAPolicy struct

+ Digest map[string]string

+ DownloadLocation string

+ URI string

+ type VSAPredicate struct

+ InputAttestations []VSAInputAttestation

+ Policy VSAPolicy

+ ResourceURI string

+ TimeVerified string

+ VerificationResult string

+ VerifiedLevels []string

+ Verifier VSAVerifier

+ type VSAVerifier struct

+ ID string

+ type VerifyOptions struct

+ Keys []*KeyMetadata

+ SkipTL bool

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL