cosign

package
v1.8.5 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Dec 20, 2022 License: Apache-2.0 Imports: 32 Imported by: 2

Documentation

Index

Constants

This section is empty.

Variables

View Source
var ImageSignatureRepository string

ImageSignatureRepository is an alternate signature repository

Functions

func ClearMock added in v1.7.0

func ClearMock()

func SetMock added in v1.5.0

func SetMock(image string, data [][]byte) error

Types

type Cosign added in v1.5.0

type Cosign interface {
	VerifyImageSignatures(ctx context.Context, signedImgRef name.Reference, co *cosign.CheckOpts) ([]oci.Signature, bool, error)

	VerifyImageAttestations(ctx context.Context, signedImgRef name.Reference, co *cosign.CheckOpts) (checkedAttestations []oci.Signature, bundleVerified bool, err error)
}

type CosignError added in v1.8.0

type CosignError struct{}

type Options added in v1.6.0

type Options struct {
	ImageRef             string
	FetchAttestations    bool
	Key                  string
	Cert                 string
	CertChain            string
	Roots                string
	Subject              string
	Issuer               string
	AdditionalExtensions map[string]string
	Annotations          map[string]string
	Repository           string
	RekorURL             string
	SignatureAlgorithm   string
	PredicateType        string
}

type Response added in v1.7.0

type Response struct {
	Digest     string
	Statements []map[string]interface{}
}

func FetchAttestations added in v1.5.0

func FetchAttestations(opts Options) (*Response, error)

FetchAttestations retrieves signed attestations and decodes them into in-toto statements https://github.com/in-toto/attestation/blob/main/spec/README.md#statement

func VerifySignature added in v1.5.0

func VerifySignature(opts Options) (*Response, error)

VerifySignature verifies that the image has the expected signatures

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL