tuf

Documentation

Index

• Constants
• func DefaultDockerCfgDir() string
• func DefaultTrustDir() string
• func EnsureTrustDir(trustDir string) error
• func GetTargetAndSHA(ref, trustServer, tlscacert, trustDir, timeout string) (*client.TargetWithRole, string, error)
• func GetTargetWithRole(gun, name, trustServer, tlscacert, trustDir, timeout string) (*client.TargetWithRole, error)
• func GetTargets(gun, trustServer, tlscacert, trustDir, timeout string) ([]*client.TargetWithRole, error)
• func GetThickBundle(localFile string) ([]byte, error)
• func GetThinBundle(ref string) ([]byte, error)
• func NewTargetFromPushResult(targetName string, pushResult types.PushResult, ...) (*client.Target, error)
• func PrintTargets(gun, trustServer, tlscacert, trustDir, timeout string) error
• func SignAndPublish(trustDir, trustServer, ref, file, tlscacert, rootKey, timeout string, ...) (*client.Target, error)
• func SignAndPublishWithImagePushResult(trustDir, trustServer, ref string, pushResult types.PushResult, ...) (*client.Target, error)
• func VerifyTrust(buf []byte, trustedSHA string) error

Constants

const (
	// DockerNotaryServer is the default Notary server associated with Docker Hub
	DockerNotaryServer = "https://notary.docker.io"
)

Functions

func DefaultDockerCfgDir

func DefaultDockerCfgDir() string

func DefaultTrustDir

func DefaultTrustDir() string

func EnsureTrustDir

func EnsureTrustDir(trustDir string) error

ensures the trust directory exists

func GetTargetAndSHA

func GetTargetAndSHA(ref, trustServer, tlscacert, trustDir, timeout string) (*client.TargetWithRole, string, error)

GetTargetAndSHA returns the target with roles and the SHA256 of the target file

func GetTargetWithRole

func GetTargetWithRole(gun, name, trustServer, tlscacert, trustDir, timeout string) (*client.TargetWithRole, error)

GetTargetWithRole returns a single target by name from the trusted collection

func GetTargets

func GetTargets(gun, trustServer, tlscacert, trustDir, timeout string) ([]*client.TargetWithRole, error)

GetTargets returns all targets for a given gun from the trusted collection

func GetThickBundle

func GetThickBundle(localFile string) ([]byte, error)

func GetThinBundle

func GetThinBundle(ref string) ([]byte, error)

func NewTargetFromPushResult

func NewTargetFromPushResult(targetName string, pushResult types.PushResult, targetCustom *canonicaljson.RawMessage) (*client.Target, error)

func PrintTargets

func PrintTargets(gun, trustServer, tlscacert, trustDir, timeout string) error

PrintTargets prints all the targets for a specific GUN from a trust server

func SignAndPublish

func SignAndPublish(trustDir, trustServer, ref, file, tlscacert, rootKey, timeout string, custom *canonicaljson.RawMessage) (*client.Target, error)

SignAndPublish signs an artifact, then publishes the metadata to a trust server

func SignAndPublishWithImagePushResult

func SignAndPublishWithImagePushResult(trustDir, trustServer, ref string, pushResult types.PushResult, tlscacert, rootKey, timeout string, custom *canonicaljson.RawMessage) (*client.Target, error)

SignAndPublish signs a Docker Image, then publishes the metadata to a trust server

func VerifyTrust

func VerifyTrust(buf []byte, trustedSHA string) error

VerifyTrust ensures the trust metadata for a given GUN matches the metadata of the pushed bundle