signer

Documentation

Overview

Package signer implements simplified cosign-compatible OCI image signer.

Index

• type Signer
  • func NewSigner(key crypto.PrivateKey) (*Signer, error)
  • func (s *Signer) GetCheckOpts() *cosign.CheckOpts
  • func (s *Signer) GetPublicKeyPEM() []byte
  • func (s *Signer) GetVerifier() signature.Verifier
  • func (s *Signer) SignImage(ctx context.Context, imageRef name.Digest, pusher *remote.Pusher) error

Types

type Signer

type Signer struct {
	// contains filtered or unexported fields
}

Signer holds a key used to sign the images.

We are not using directly 'cosign' implementation here, as it's behind series of internal/ packages.

func NewSigner

func NewSigner(key crypto.PrivateKey) (*Signer, error)

NewSigner creates a new signer.

func (*Signer) GetCheckOpts

func (s *Signer) GetCheckOpts() *cosign.CheckOpts

GetCheckOpts returns cosign compatible image signature verification options.

func (*Signer) GetPublicKeyPEM

func (s *Signer) GetPublicKeyPEM() []byte

GetPublicKeyPEM returns the public key in PEM format.

func (*Signer) GetVerifier

func (s *Signer) GetVerifier() signature.Verifier

GetVerifier returns the verifier for the signature.

func (*Signer) SignImage

func (s *Signer) SignImage(ctx context.Context, imageRef name.Digest, pusher *remote.Pusher) error

SignImage signs the image in the OCI repository.