cosign

Documentation

Index

• Variables
• func FetchAttestations(imageRef string, imageVerify *v1.ImageVerification, log logr.Logger) ([]map[string]interface{}, error)
• func SetMock(image string, data [][]byte) error
• func VerifySignature(opts Options) (digest string, err error)
• type Cosign
• type Options

Variables

var ImageSignatureRepository string

ImageSignatureRepository is an alternate signature repository

Functions

func FetchAttestations

func FetchAttestations(imageRef string, imageVerify *v1.ImageVerification, log logr.Logger) ([]map[string]interface{}, error)

FetchAttestations retrieves signed attestations and decodes them into in-toto statements https://github.com/in-toto/attestation/blob/main/spec/README.md#statement

func SetMock

func SetMock(image string, data [][]byte) error

func VerifySignature

func VerifySignature(opts Options) (digest string, err error)

VerifySignature verifies that the image has the expected key

Types

type Cosign

type Cosign interface {
	VerifyImageSignatures(ctx context.Context, signedImgRef name.Reference, co *cosign.CheckOpts) ([]oci.Signature, bool, error)

	VerifyImageAttestations(ctx context.Context, signedImgRef name.Reference, co *cosign.CheckOpts) (checkedAttestations []oci.Signature, bundleVerified bool, err error)
}

type Options

type Options struct {
	ImageRef    string
	Key         string
	Roots       []byte
	Subject     string
	Issuer      string
	Annotations map[string]string
	Repository  string
	Log         logr.Logger
}