publish

Documentation

Index

• func CollectFiles(publishPath string) ([]registry.FileLayer, string, error)
• func ManifestDigest(layers []registry.FileLayer, publishRoot string) (v1.Hash, error)
• func Publish(ctx context.Context, reg *registry.Client, api *apiclient.Client, opts Options) (string, error)
• func RegistryRepo(namespace, artifact string) string
• func SkipProvenanceFromEnv() bool
• func SkipSignFromEnv() bool
• type ManifestSigner
• type Options

Functions

func CollectFiles

func CollectFiles(publishPath string) ([]registry.FileLayer, string, error)

CollectFiles walks publishPath and returns file layers per ADR-0001 (files only, no symlinks).

func ManifestDigest

func ManifestDigest(layers []registry.FileLayer, publishRoot string) (v1.Hash, error)

ManifestDigest computes manifest digest without pushing (for tests).

func Publish

func Publish(ctx context.Context, reg *registry.Client, api *apiclient.Client, opts Options) (string, error)

Publish uploads files to the registry and registers metadata via the API.

func RegistryRepo

func RegistryRepo(namespace, artifact string) string

RegistryRepo returns the OCI repository name {namespace}/{artifact}.

func SkipProvenanceFromEnv

func SkipProvenanceFromEnv() bool

SkipProvenanceFromEnv reports whether provenance generation is disabled.

func SkipSignFromEnv

func SkipSignFromEnv() bool

SkipSignFromEnv reports whether signing should be skipped (local dev).

Types

type ManifestSigner

type ManifestSigner interface {
	SignManifest(ctx context.Context, manifestJSON []byte) (bundle json.RawMessage, issuer, subject *string, err error)
}

ManifestSigner signs manifest bytes and returns a Sigstore bundle (FR-SIGN-001–003).

type Options

type Options struct {
	Namespace      string
	Artifact       string
	Tag            string
	Path           string
	SBOMPath       string
	SkipSign       bool
	SkipProvenance bool
	Signer         ManifestSigner
}

Options configures a publish run.