cosign

Documentation

Index

• type CosignVerifier
  • func NewCosignVerifier(ctx context.Context, opts ...Options) (*CosignVerifier, error)
  • func (v *CosignVerifier) Verify(ctx context.Context, ref name.Reference) (soci.VerificationResult, error)
• type Options
  • func WithIdentities(identities []cosign.Identity) Options
  • func WithPublicKey(publicKey []byte) Options
  • func WithRemoteOptions(opts ...remote.Option) Options

Types

type CosignVerifier

type CosignVerifier struct {
	// contains filtered or unexported fields
}

CosignVerifier is a struct which is responsible for executing verification logic.

func NewCosignVerifier

func NewCosignVerifier(ctx context.Context, opts ...Options) (*CosignVerifier, error)

NewCosignVerifier initializes a new CosignVerifier.

func (*CosignVerifier) Verify

func (v *CosignVerifier) Verify(ctx context.Context, ref name.Reference) (soci.VerificationResult, error)

Verify verifies the authenticity of the given ref OCI image. It returns a boolean indicating if the verification was successful. It returns an error if the verification fails, nil otherwise.

type Options

type Options func(opts *options)

Options is a function that configures the options applied to a Verifier.

func WithIdentities

func WithIdentities(identities []cosign.Identity) Options

WithIdentities specifies the identity matchers that have to be met for the signature to be deemed valid.

func WithPublicKey

func WithPublicKey(publicKey []byte) Options

WithPublicKey sets the public key.

func WithRemoteOptions

func WithRemoteOptions(opts ...remote.Option) Options

WithRemoteOptions is a functional option for overriding the default remote options used by the verifier.