cosign

Documentation

Index

• Variables
• func FetchAttestations(imageRef string, key []byte, repository string) ([]map[string]interface{}, error)
• func Initialize(client kubernetes.Interface, namespace, serviceAccount string, ...) error
• func SetMock(image string, data [][]byte) error
• func UpdateKeychain() error
• func VerifySignature(imageRef string, key []byte, repository string, log logr.Logger) (digest string, err error)
• type Cosign

Variables

var (
	// ImageSignatureRepository is an alternate signature repository
	ImageSignatureRepository string
	Secrets                  []string
)

Functions

func FetchAttestations

func FetchAttestations(imageRef string, key []byte, repository string) ([]map[string]interface{}, error)

FetchAttestations retrieves signed attestations and decodes them into in-toto statements https://github.com/in-toto/attestation/blob/main/spec/README.md#statement

func Initialize

func Initialize(client kubernetes.Interface, namespace, serviceAccount string, imagePullSecrets []string) error

Initialize loads the image pull secrets and initializes the default auth method for container registry API calls

func SetMock

func SetMock(image string, data [][]byte) error

func UpdateKeychain

func UpdateKeychain() error

UpdateKeychain reinitializes the image pull secrets and default auth method for container registry API calls

func VerifySignature

func VerifySignature(imageRef string, key []byte, repository string, log logr.Logger) (digest string, err error)

Types

type Cosign

type Cosign interface {
	Verify(ctx context.Context, signedImgRef name.Reference, accessor cosign.Accessor, co *cosign.CheckOpts) ([]oci.Signature, bool, error)
}