signutil

Documentation

Index

• func Sign(rawRef string, experimental bool, options types.ImageSignOptions) error
• func SignCosign(rawRef string, keyRef string) error
• func SignNotation(rawRef string, keyNameRef string) error
• func Verify(ctx context.Context, rawRef string, hostsDirs []string, experimental bool, ...) (ref string, err error)
• func VerifyCosign(ctx context.Context, rawRef string, keyRef string, hostsDirs []string, ...) (string, error)
• func VerifyNotation(ctx context.Context, rawRef string, hostsDirs []string) (string, error)

Functions

func Sign

func Sign(rawRef string, experimental bool, options types.ImageSignOptions) error

Sign signs an image using a signer and options provided in options.

func SignCosign

func SignCosign(rawRef string, keyRef string) error

SignCosign signs an image(`rawRef`) using a cosign private key (`keyRef`)

func SignNotation

func SignNotation(rawRef string, keyNameRef string) error

SignNotation signs an image(`rawRef`) using a notation key name (`keyNameRef`)

func Verify

func Verify(ctx context.Context, rawRef string, hostsDirs []string, experimental bool, options types.ImageVerifyOptions) (ref string, err error)

Verify verifies an image using a verifier and options provided in options.

func VerifyCosign

func VerifyCosign(ctx context.Context, rawRef string, keyRef string, hostsDirs []string,
	certIdentity string, certIdentityRegexp string, certOidcIssuer string, certOidcIssuerRegexp string) (string, error)

VerifyCosign verifies an image(`rawRef`) with a cosign public key(`keyRef`) `hostsDirs` are used to resolve image `rawRef` Either --cosign-certificate-identity or --cosign-certificate-identity-regexp and either --cosign-certificate-oidc-issuer or --cosign-certificate-oidc-issuer-regexp must be set for keyless flows.

func VerifyNotation

func VerifyNotation(ctx context.Context, rawRef string, hostsDirs []string) (string, error)

VerifyNotation verifies an image(`rawRef`) with the pre-configured notation trust policy `hostsDirs` are used to resolve image `rawRef`