sign

Documentation

Index

• func GetAttachedImageRef(ref name.Reference, attachment string, opts ...ociremote.Option) (name.Reference, error)
• func ShouldUploadToTlog(ctx context.Context, ref name.Reference, force bool, url string) bool
• func SignBlobCmd(ro *options.RootOptions, ko KeyOpts, regOpts options.RegistryOptions, ...) ([]byte, error)
• func SignCmd(ro *options.RootOptions, ko KeyOpts, regOpts options.RegistryOptions, ...) error
• type KeyOpts
• type SignerVerifier
  • func SignerFromKeyOpts(ctx context.Context, certPath string, certChainPath string, ko KeyOpts) (*SignerVerifier, error)
  • func (c *SignerVerifier) Bytes(ctx context.Context) ([]byte, error)
  • func (c *SignerVerifier) Close()

Functions

func GetAttachedImageRef

func GetAttachedImageRef(ref name.Reference, attachment string, opts ...ociremote.Option) (name.Reference, error)

func ShouldUploadToTlog

func ShouldUploadToTlog(ctx context.Context, ref name.Reference, force bool, url string) bool

func SignBlobCmd

func SignBlobCmd(ro *options.RootOptions, ko KeyOpts, regOpts options.RegistryOptions, payloadPath string, b64 bool, outputSignature string, outputCertificate string) ([]byte, error)

nolint

func SignCmd

func SignCmd(ro *options.RootOptions, ko KeyOpts, regOpts options.RegistryOptions, annotations map[string]interface{},
	imgs []string, certPath string, certChainPath string, upload bool, outputSignature, outputCertificate string,
	payloadPath string, force bool, recursive bool, attachment string) error

nolint

Types

type KeyOpts

type KeyOpts struct {
	Sk               bool
	Slot             string
	KeyRef           string
	FulcioURL        string
	RekorURL         string
	IDToken          string
	PassFunc         cosign.PassFunc
	OIDCIssuer       string
	OIDCClientID     string
	OIDCClientSecret string
	OIDCRedirectURL  string
	BundlePath       string

	// Modeled after InsecureSkipVerify in tls.Config, this disables
	// verifying the SCT.
	InsecureSkipFulcioVerify bool
}

type SignerVerifier

type SignerVerifier struct {
	Cert  []byte
	Chain []byte
	signature.SignerVerifier
	// contains filtered or unexported fields
}

func SignerFromKeyOpts

func SignerFromKeyOpts(ctx context.Context, certPath string, certChainPath string, ko KeyOpts) (*SignerVerifier, error)

func (*SignerVerifier) Bytes

func (c *SignerVerifier) Bytes(ctx context.Context) ([]byte, error)

func (*SignerVerifier) Close

func (c *SignerVerifier) Close()