sign

Documentation

Index

• func GetAttachedImageRef(ref name.Reference, attachment string, opts ...ociremote.Option) (name.Reference, error)
• func ShouldUploadToTlog(ctx context.Context, ref name.Reference, force bool, url string) bool
• func SignBlobCmd(ctx context.Context, ko KeyOpts, regOpts options.RegistryOptions, ...) ([]byte, error)
• func SignCmd(ctx context.Context, ko KeyOpts, regOpts options.RegistryOptions, ...) error
• type KeyOpts
• type SignerVerifier
  • func SignerFromKeyOpts(ctx context.Context, certPath string, ko KeyOpts) (*SignerVerifier, error)
  • func (c *SignerVerifier) Bytes(ctx context.Context) ([]byte, error)
  • func (c *SignerVerifier) Close()

Functions

func GetAttachedImageRef

func GetAttachedImageRef(ref name.Reference, attachment string, opts ...ociremote.Option) (name.Reference, error)

func ShouldUploadToTlog

func ShouldUploadToTlog(ctx context.Context, ref name.Reference, force bool, url string) bool

func SignBlobCmd

func SignBlobCmd(ctx context.Context, ko KeyOpts, regOpts options.RegistryOptions, payloadPath string, b64 bool, outputSignature string, outputCertificate string, timeout time.Duration) ([]byte, error)

nolint

func SignCmd

func SignCmd(ctx context.Context, ko KeyOpts, regOpts options.RegistryOptions, annotations map[string]interface{},
	imgs []string, certPath string, upload bool, outputSignature, outputCertificate string, payloadPath string, force bool, recursive bool, attachment string) error

nolint

Types

type KeyOpts

type KeyOpts struct {
	Sk               bool
	Slot             string
	KeyRef           string
	FulcioURL        string
	RekorURL         string
	IDToken          string
	PassFunc         cosign.PassFunc
	OIDCIssuer       string
	OIDCClientID     string
	OIDCClientSecret string
	BundlePath       string

	// Modeled after InsecureSkipVerify in tls.Config, this disables
	// verifying the SCT.
	InsecureSkipFulcioVerify bool
}

type SignerVerifier

type SignerVerifier struct {
	Cert  []byte
	Chain []byte
	signature.SignerVerifier
	// contains filtered or unexported fields
}

func SignerFromKeyOpts

func SignerFromKeyOpts(ctx context.Context, certPath string, ko KeyOpts) (*SignerVerifier, error)

func (*SignerVerifier) Bytes

func (c *SignerVerifier) Bytes(ctx context.Context) ([]byte, error)

func (*SignerVerifier) Close

func (c *SignerVerifier) Close()