Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
View Source
var ImageSignatureRepository string
ImageSignatureRepository is an alternate signature repository
Functions ¶
func FetchAttestations ¶ added in v1.5.0
func FetchAttestations(imageRef string, imageVerify *v1.ImageVerification, log logr.Logger) ([]map[string]interface{}, error)
FetchAttestations retrieves signed attestations and decodes them into in-toto statements https://github.com/in-toto/attestation/blob/main/spec/README.md#statement
func VerifySignature ¶ added in v1.5.0
VerifySignature verifies that the image has the expected key
Types ¶
type Cosign ¶ added in v1.5.0
type Cosign interface { VerifyImageSignatures(ctx context.Context, signedImgRef name.Reference, co *cosign.CheckOpts) ([]oci.Signature, bool, error) VerifyImageAttestations(ctx context.Context, signedImgRef name.Reference, co *cosign.CheckOpts) (checkedAttestations []oci.Signature, bundleVerified bool, err error) }
Click to show internal directories.
Click to hide internal directories.