signutil

Documentation

Overview

Package signutil manages signing of OCI images

Index

• func Sign(log logr.Logger, provider string, imageRef string, keyRef string) error
• func SignCosign(log logr.Logger, imageRef string, keyRef string) error
• func Verify(log logr.Logger, provider string, imageRef string, keyRef string, ...) error
• func VerifyCosign(log logr.Logger, imageRef string, keyRef string, certIdentity string, ...) error

Functions

func Sign

func Sign(log logr.Logger, provider string, imageRef string, keyRef string) error

Sign signs an image using the specified provider.

func SignCosign

func SignCosign(log logr.Logger, imageRef string, keyRef string) error

SignCosign signs an image (`imageRef`) using a cosign private key (`keyRef`)

func Verify

func Verify(log logr.Logger, provider string, imageRef string, keyRef string, certIdentity string, certIdentityRegexp string, certOidcIssuer string, certOidcIssuerRegexp string) error

Verify verifies an image using the specified provider.

func VerifyCosign

func VerifyCosign(log logr.Logger, imageRef string, keyRef string,
	certIdentity string, certIdentityRegexp string, certOidcIssuer string, certOidcIssuerRegexp string) error

VerifyCosign verifies an image (`rawRef`) with a cosign public key (`keyRef`) Either --cosign-certificate-identity or --cosign-certificate-identity-regexp and either --cosign-certificate-oidc-issuer or --cosign-certificate-oidc-issuer-regexp must be set for keyless flows.