verify

package

Go to main page

Versions in this module

v0

v0.7.0

Jan 24, 2025

Changes in this version

type BaseSignedEntity

+ func (b *BaseSignedEntity) HasInclusionPromise() bool

+ func (b *BaseSignedEntity) HasInclusionProof() bool

+ func (b *BaseSignedEntity) SignatureContent() (SignatureContent, error)

+ func (b *BaseSignedEntity) VerificationContent() (VerificationContent, error)

type VerificationContent

+ Certificate func() *x509.Certificate

+ PublicKey func() PublicKeyProvider

type VerificationResult

+ func (b *VerificationResult) MarshalJSON() ([]byte, error)

+ func (b *VerificationResult) UnmarshalJSON(data []byte) error

type VerifierOption

+ func WithCurrentTime() VerifierOption

v0.6.2

Sep 10, 2024

v0.6.1

Sep 4, 2024

v0.6.0

Aug 16, 2024 GO-2024-3116

GO-2024-3116: sigstore-go has an unbounded loop over untrusted input can lead to endless data attack in github.com/sigstore/sigstore-go

v0.5.1

Jul 24, 2024 GO-2024-3116

GO-2024-3116: sigstore-go has an unbounded loop over untrusted input can lead to endless data attack in github.com/sigstore/sigstore-go

Changes in this version

type IssuerMatcher

+ func NewIssuerMatcher(issuerValue, regexpStr string) (IssuerMatcher, error)

v0.5.0

Jul 24, 2024 GO-2024-3116

GO-2024-3116: sigstore-go has an unbounded loop over untrusted input can lead to endless data attack in github.com/sigstore/sigstore-go

Changes in this version

+ var ErrDSSEInvalidSignatureCount = errors.New("exactly one signature is required")

type CertificateIdentity

+ Issuer IssuerMatcher

+ type ErrNoMatchingCertificateIdentity struct

+ func (e *ErrNoMatchingCertificateIdentity) Error() string

+ func (e *ErrNoMatchingCertificateIdentity) Unwrap() []error

+ type ErrValueMismatch struct

+ func (e *ErrValueMismatch) Error() string

+ type ErrValueRegexMismatch struct

+ func (e *ErrValueRegexMismatch) Error() string

+ type IssuerMatcher struct

+ Issuer string

+ Regexp regexp.Regexp

+ func NewIssuserMatcher(issuerValue, regexpStr string) (IssuerMatcher, error)

+ func (i *IssuerMatcher) MarshalJSON() ([]byte, error)

+ func (i IssuerMatcher) Verify(actualCert certificate.Summary) error

type PolicyConfig

+ func (p *PolicyConfig) WeExpectSigningKey() bool

type PolicyOption

+ func WithKey() PolicyOption

type SubjectAlternativeNameMatcher

+ SubjectAlternativeName string

type VerificationContent

+ GetCertificate func() *x509.Certificate

type VerifierOption

+ func WithoutAnyObserverTimestampsUnsafe() VerifierOption

v0.4.0

Jun 10, 2024 GO-2024-3116

GO-2024-3116: sigstore-go has an unbounded loop over untrusted input can lead to endless data attack in github.com/sigstore/sigstore-go

v0.3.0

Apr 10, 2024 GO-2024-3116

GO-2024-3116: sigstore-go has an unbounded loop over untrusted input can lead to endless data attack in github.com/sigstore/sigstore-go

v0.2.0

Feb 12, 2024 GO-2024-3116

GO-2024-3116: sigstore-go has an unbounded loop over untrusted input can lead to endless data attack in github.com/sigstore/sigstore-go

v0.1.0

Jan 24, 2024 GO-2024-3116

GO-2024-3116: sigstore-go has an unbounded loop over untrusted input can lead to endless data attack in github.com/sigstore/sigstore-go

Changes in this version

+ const VerificationResultMediaType01

+ func VerifyArtifactTransparencyLog(entity SignedEntity, trustedMaterial root.TrustedMaterial, logThreshold int, ...) ([]time.Time, error)

+ func VerifyLeafCertificate(observerTimestamp time.Time, leafCert x509.Certificate, ...) error

+ func VerifySignature(sigContent SignatureContent, verificationContent VerificationContent, ...) error

+ func VerifySignatureWithArtifact(sigContent SignatureContent, verificationContent VerificationContent, ...) error

+ func VerifySignatureWithArtifactDigest(sigContent SignatureContent, verificationContent VerificationContent, ...) error

+ func VerifySignedCertificateTimestamp(leafCert *x509.Certificate, threshold int, ...) error

+ func VerifyTimestampAuthority(entity SignedEntity, trustedMaterial root.TrustedMaterial) ([]time.Time, error)

+ func VerifyTimestampAuthorityWithThreshold(entity SignedEntity, trustedMaterial root.TrustedMaterial, threshold int) ([]time.Time, error)

+ type ArtifactPolicyOption func(*PolicyConfig) error

+ func WithArtifact(artifact io.Reader) ArtifactPolicyOption

+ func WithArtifactDigest(algorithm string, artifactDigest []byte) ArtifactPolicyOption

+ func WithoutArtifactUnsafe() ArtifactPolicyOption

+ type BaseSignedEntity struct

+ func (b *BaseSignedEntity) Envelope() (*dsse.Envelope, error)

+ func (b *BaseSignedEntity) MessageSignature() (*protocommon.MessageSignature, error)

+ func (b *BaseSignedEntity) Signature() ([]byte, error)

+ func (b *BaseSignedEntity) Timestamps() ([][]byte, error)

+ func (b *BaseSignedEntity) TlogEntries() ([]*tlog.Entry, error)

+ func (b *BaseSignedEntity) VerificationProvider() (VerificationContent, error)

+ type CertificateIdentities []CertificateIdentity

+ func (i CertificateIdentities) Verify(cert certificate.Summary) (*CertificateIdentity, error)

+ type CertificateIdentity struct

+ SubjectAlternativeName SubjectAlternativeNameMatcher

+ func NewCertificateIdentity(sanMatcher SubjectAlternativeNameMatcher, extensions certificate.Extensions) (CertificateIdentity, error)

+ func NewShortCertificateIdentity(issuer, sanValue, sanType, sanRegex string) (CertificateIdentity, error)

+ func (c CertificateIdentity) Verify(actualCert certificate.Summary) bool

+ type EnvelopeContent interface

+ RawEnvelope func() *dsse.Envelope

+ Statement func() (*in_toto.Statement, error)

+ type ErrVerification struct

+ func NewVerificationError(e error) ErrVerification

+ func (e ErrVerification) Error() string

+ func (e ErrVerification) String() string

+ func (e ErrVerification) Unwrap() error

+ type HasInclusionPromise interface

+ HasInclusionPromise func() bool

+ type HasInclusionProof interface

+ HasInclusionProof func() bool

+ type MessageSignatureContent interface

+ Digest func() []byte

+ DigestAlgorithm func() string

+ Signature func() []byte

+ type PolicyBuilder struct

+ func NewPolicy(artifactOpt ArtifactPolicyOption, options ...PolicyOption) PolicyBuilder

+ func (pc PolicyBuilder) BuildConfig() (*PolicyConfig, error)

+ func (pc PolicyBuilder) Options() []PolicyOption

+ type PolicyConfig struct

+ func (p *PolicyConfig) Validate() error

+ func (p *PolicyConfig) WeExpectAnArtifact() bool

+ func (p *PolicyConfig) WeExpectIdentities() bool

+ type PolicyOption func(*PolicyConfig) error

+ func WithCertificateIdentity(identity CertificateIdentity) PolicyOption

+ func WithoutIdentitiesUnsafe() PolicyOption

+ type PublicKeyProvider interface

+ Hint func() string

+ type SignatureContent interface

+ EnvelopeContent func() EnvelopeContent

+ MessageSignatureContent func() MessageSignatureContent

+ Signature func() []byte

+ type SignatureProvider interface

+ SignatureContent func() (SignatureContent, error)

+ type SignatureVerificationResult struct

+ Certificate *certificate.Summary

+ PublicKeyID *[]byte

+ type SignedEntity interface

+ type SignedEntityVerifier struct

+ func NewSignedEntityVerifier(trustedMaterial root.TrustedMaterial, options ...VerifierOption) (*SignedEntityVerifier, error)

+ func (v *SignedEntityVerifier) Verify(entity SignedEntity, pb PolicyBuilder) (*VerificationResult, error)

+ func (v *SignedEntityVerifier) VerifyObserverTimestamps(entity SignedEntity, logTimestamps []TimestampVerificationResult) ([]TimestampVerificationResult, error)

+ func (v *SignedEntityVerifier) VerifyTransparencyLogInclusion(entity SignedEntity) ([]TimestampVerificationResult, error)

+ type SignedTimestampProvider interface

+ Timestamps func() ([][]byte, error)

+ type SubjectAlternativeNameMatcher struct

+ Regexp regexp.Regexp

+ func NewSANMatcher(sanValue string, sanType string, regexpStr string) (SubjectAlternativeNameMatcher, error)

+ func (s *SubjectAlternativeNameMatcher) MarshalJSON() ([]byte, error)

+ func (s SubjectAlternativeNameMatcher) Verify(actualCert certificate.Summary) bool

+ type TimestampVerificationResult struct

+ Timestamp time.Time

+ Type string

+ URI string

+ type TlogEntryProvider interface

+ TlogEntries func() ([]*tlog.Entry, error)

+ type VerificationContent interface

+ CompareKey func(any, root.TrustedMaterial) bool

+ HasCertificate func() (x509.Certificate, bool)

+ HasPublicKey func() (PublicKeyProvider, bool)

+ ValidAtTime func(time.Time, root.TrustedMaterial) bool

+ type VerificationProvider interface

+ VerificationContent func() (VerificationContent, error)

+ type VerificationResult struct

+ MediaType string

+ Signature *SignatureVerificationResult

+ Statement *in_toto.Statement

+ VerifiedIdentity *CertificateIdentity

+ VerifiedTimestamps []TimestampVerificationResult

+ func NewVerificationResult() *VerificationResult

+ type VerifierConfig struct

+ func (c *VerifierConfig) Validate() error

+ type VerifierOption func(*VerifierConfig) error

+ func WithIntegratedTimestamps(threshold int) VerifierOption

+ func WithObserverTimestamps(threshold int) VerifierOption

+ func WithOnlineVerification() VerifierOption

+ func WithSignedCertificateTimestamps(threshold int) VerifierOption

+ func WithSignedTimestamps(threshold int) VerifierOption

+ func WithTransparencyLog(threshold int) VerifierOption

+ func WithoutAnyObserverTimestampsInsecure() VerifierOption

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL