cosign

Documentation

Index

• Variables
• func ClearMock()
• func FetchAttestations(imageRef string, imageVerify v1.ImageVerification) ([]map[string]interface{}, error)
• func Init() error
• func SetMock(image string, data [][]byte) error
• func VerifySignature(opts Options) (digest string, err error)
• type Cosign
• type Options

Variables

var ImageSignatureRepository string

ImageSignatureRepository is an alternate signature repository

Functions

func ClearMock

func ClearMock()

func FetchAttestations

func FetchAttestations(imageRef string, imageVerify v1.ImageVerification) ([]map[string]interface{}, error)

FetchAttestations retrieves signed attestations and decodes them into in-toto statements https://github.com/in-toto/attestation/blob/main/spec/README.md#statement

func Init

func Init() error

func SetMock

func SetMock(image string, data [][]byte) error

func VerifySignature

func VerifySignature(opts Options) (digest string, err error)

VerifySignature verifies that the image has the expected signatures

Types

type Cosign

type Cosign interface {
	VerifyImageSignatures(ctx context.Context, signedImgRef name.Reference, co *cosign.CheckOpts) ([]oci.Signature, bool, error)

	VerifyImageAttestations(ctx context.Context, signedImgRef name.Reference, co *cosign.CheckOpts) (checkedAttestations []oci.Signature, bundleVerified bool, err error)
}

type Options

type Options struct {
	ImageRef             string
	Key                  string
	Cert                 string
	CertChain            string
	Roots                string
	Subject              string
	Issuer               string
	AdditionalExtensions map[string]string
	Annotations          map[string]string
	Repository           string
	RekorURL             string
}