Versions in this module Expand all Collapse all v1 v1.0.0 Aug 25, 2026 Changes in this version + const DefaultIdentityRe + const DefaultIssuer + const DefaultRegistry + const DefaultRekorURL + const DefaultRepo + const PermSettingsManage + var ErrForbidden = errors.New("update: forbidden") + var ErrInvalid = errors.New("update: invalid event") + var ErrNotInstalled = errors.New("no Redoubt installation found (missing .env)") + var ErrVerification = errors.New("signature verification failed") + var Images = []string + func Apply(o Options, plan *Plan) (trigger string, err error) + func AutoUpdateFlag(etcDir string) string + func EnvKey(name string) string + func GetEnv(path, key string) (string, error) + func LatestVersion(ctx context.Context, hc *http.Client, repo string) (string, error) + func PayloadDigest(payload []byte) (string, error) + func SetEnv(path string, values map[string]string) error + type Actor struct + Can func(perm string) bool + Email string + type Event struct + Enabled bool + Images map[string]string + Kind string + Signer string + Version string + type Identity struct + IntegratedTime time.Time + Issuer string + LogIndex int64 + Subject string + func Verify(sig Signature, tr TrustRoot, pol Policy) (Identity, error) + type Options struct + EtcDir string + HTTP *http.Client + Policy Policy + Reg *Registry + Registry string + Rekor *Rekor + Repo string + Trust TrustRoot + Version string + type Plan struct + Changed bool + Current map[string]string + Images []Verified + Version string + func Check(ctx context.Context, o Options) (*Plan, error) + type Policy struct + IdentityRe *regexp.Regexp + Issuer string + func DefaultPolicy() Policy + type Recorder struct + Audit audit.Sink + Now func() time.Time + func (r *Recorder) Record(ctx context.Context, actor Actor, ev Event) error + func (r *Recorder) RecordVersionChange(ctx context.Context, prev, current string) + type Ref struct + Digest string + Host string + Path string + Tag string + func ParseRef(s string) (Ref, error) + func (r Ref) String() string + type Registry struct + HTTP *http.Client + PlainHTTP bool + func (c *Registry) Resolve(ctx context.Context, ref Ref) (string, error) + func (c *Registry) Signatures(ctx context.Context, ref Ref, digest string) ([]Signature, error) + type Rekor struct + HTTP *http.Client + URL string + func (r *Rekor) Lookup(ctx context.Context, payload []byte) ([]*RekorBundle, error) + type RekorBundle struct + Payload struct{ ... } + SignedEntryTimestamp string + func ParseBundle(data []byte) (*RekorBundle, error) + type Signature struct + Bundle *RekorBundle + CertPEM []byte + ChainPEM []byte + Payload []byte + Signature []byte + type TrustRoot struct + Fulcio *x509.CertPool + RekorKey crypto.PublicKey + func DefaultTrustRoot() (TrustRoot, error) + func LoadTrustRoot(dir string) (TrustRoot, error) + func ParseTrustRoot(fulcioPEM, rekorPEM []byte) (TrustRoot, error) + type Verified struct + Digest string + Identity Identity + Name string + Ref string