sign

Documentation

Index

• func Bundle(entry *models.LogEntryAnon) *oci.Bundle
• func GetAttachedImageRef(ref name.Reference, attachment string, opts ...ociremote.Option) (name.Reference, error)
• func ShouldUploadToTlog(ref name.Reference, force bool, url string) (bool, error)
• func SignBlobCmd(ctx context.Context, ko KeyOpts, regOpts options.RegistryOptions, ...) ([]byte, error)
• func SignCmd(ctx context.Context, ko KeyOpts, regOpts options.RegistryOptions, ...) error
• func UploadToTlog(ctx context.Context, sv *CertSignVerifier, rekorURL string, upload Uploader) (*oci.Bundle, error)
• type CertSignVerifier
  • func SignerFromKeyOpts(ctx context.Context, certPath string, ko KeyOpts) (*CertSignVerifier, error)
  • func (c *CertSignVerifier) Close()
• type KeyOpts
• type Uploader

Functions

func Bundle

func Bundle(entry *models.LogEntryAnon) *oci.Bundle

func GetAttachedImageRef

func GetAttachedImageRef(ref name.Reference, attachment string, opts ...ociremote.Option) (name.Reference, error)

func ShouldUploadToTlog

func ShouldUploadToTlog(ref name.Reference, force bool, url string) (bool, error)

func SignBlobCmd

func SignBlobCmd(ctx context.Context, ko KeyOpts, regOpts options.RegistryOptions, payloadPath string, b64 bool, output string) ([]byte, error)

nolint

func SignCmd

func SignCmd(ctx context.Context, ko KeyOpts, regOpts options.RegistryOptions, annotations map[string]interface{},
	imgs []string, certPath string, upload bool, payloadPath string, force bool, recursive bool, attachment string) error

nolint

func UploadToTlog

func UploadToTlog(ctx context.Context, sv *CertSignVerifier, rekorURL string, upload Uploader) (*oci.Bundle, error)

Types

type CertSignVerifier

type CertSignVerifier struct {
	Cert  []byte
	Chain []byte
	signature.SignerVerifier
	// contains filtered or unexported fields
}

func SignerFromKeyOpts

func SignerFromKeyOpts(ctx context.Context, certPath string, ko KeyOpts) (*CertSignVerifier, error)

func (*CertSignVerifier) Close

func (c *CertSignVerifier) Close()

type KeyOpts

type KeyOpts struct {
	Sk               bool
	Slot             string
	KeyRef           string
	FulcioURL        string
	RekorURL         string
	IDToken          string
	PassFunc         cosign.PassFunc
	OIDCIssuer       string
	OIDCClientID     string
	OIDCClientSecret string

	// Modeled after InsecureSkipVerify in tls.Config, this disables
	// verifying the SCT.
	InsecureSkipFulcioVerify bool
}

type Uploader

type Uploader func(*client.Rekor, []byte) (*models.LogEntryAnon, error)