attestation

Documentation

Overview

Package attestation helps create SLSA provenance attestations in-toto format, simulating what Tekton Chains would perform.

Index

• Constants
• func CreateStatementFor(imageName string, image v1.Image) (*in_toto.ProvenanceStatementSLSA02, error)
• func SignStatement(ctx context.Context, keyName string, ...) ([]byte, error)

Constants

const (
	PredicateBuilderID   = "https://tekton.dev/chains/v2"
	PredicateBuilderType = "https://tekton.dev/attestations/chains/pipelinerun@v2"
	PredicateType        = "slsaprovenance"
)

Functions

func CreateStatementFor

func CreateStatementFor(imageName string, image v1.Image) (*in_toto.ProvenanceStatementSLSA02, error)

CreateStatementFor creates an empty statement that can be further customized to add and subsequently signed by SignStatement.

func SignStatement

func SignStatement(ctx context.Context, keyName string, statement in_toto.ProvenanceStatementSLSA02) ([]byte, error)

SignStatement signs the provided statement with the named key. The key needs to be previously generated with the functionality from the crypto package.