verify

Documentation

Index

• func PrintVerification(imgRef string, verified []oci.Signature, output string)
• func PrintVerificationHeader(imgRef string, co *cosign.CheckOpts, bundleVerified, fulcioVerified bool)
• func VerifyBlobCmd(ctx context.Context, ko options.KeyOpts, ...) error
• type VerifyAttestationCommand
  • func (c *VerifyAttestationCommand) Exec(ctx context.Context, images []string) (err error)
• type VerifyCommand
  • func (c *VerifyCommand) Exec(ctx context.Context, images []string) (err error)

Functions

func PrintVerification

func PrintVerification(imgRef string, verified []oci.Signature, output string)

PrintVerification logs details about the verification to stdout

func PrintVerificationHeader

func PrintVerificationHeader(imgRef string, co *cosign.CheckOpts, bundleVerified, fulcioVerified bool)

func VerifyBlobCmd

func VerifyBlobCmd(ctx context.Context, ko options.KeyOpts, certRef, certEmail,
	certOidcIssuer, certChain, sigRef, blobRef string, enforceSCT bool) error

nolint

Types

type VerifyAttestationCommand

type VerifyAttestationCommand struct {
	options.RegistryOptions
	CheckClaims    bool
	KeyRef         string
	CertRef        string
	CertEmail      string
	CertOidcIssuer string
	CertChain      string
	EnforceSCT     bool
	Sk             bool
	Slot           string
	Output         string
	RekorURL       string
	PredicateType  string
	Policies       []string
	LocalImage     bool
}

VerifyAttestationCommand verifies a signature on a supplied container image nolint

func (*VerifyAttestationCommand) Exec

func (c *VerifyAttestationCommand) Exec(ctx context.Context, images []string) (err error)

Exec runs the verification command

type VerifyCommand

type VerifyCommand struct {
	options.RegistryOptions
	CheckClaims    bool
	KeyRef         string
	CertRef        string
	CertEmail      string
	CertOidcIssuer string
	CertChain      string
	EnforceSCT     bool
	Sk             bool
	Slot           string
	Output         string
	RekorURL       string
	Attachment     string
	Annotations    sigs.AnnotationsMap
	SignatureRef   string
	HashAlgorithm  crypto.Hash
	LocalImage     bool
}

VerifyCommand verifies a signature on a supplied container image nolint

func (*VerifyCommand) Exec

func (c *VerifyCommand) Exec(ctx context.Context, images []string) (err error)

Exec runs the verification command