review

Documentation

Index

• type AttestorValidatingTransport
  • func (avt *AttestorValidatingTransport) GetValidatedAttestations(image string) ([]attestation.ValidatedAttestation, error)
• type Config
• type Reviewer
  • func New(c *Config) Reviewer
  • func (r Reviewer) ReviewGAP(images []string, gaps []v1beta1.GenericAttestationPolicy, pod *v1.Pod, ...) error
  • func (r Reviewer) ReviewISP(images []string, isps []v1beta1.ImageSecurityPolicy, pod *v1.Pod, ...) error
• type ValidatingTransport

Types

type AttestorValidatingTransport

type AttestorValidatingTransport struct {
	Client   metadata.ReadOnlyClient
	Attestor v1beta1.AttestationAuthority
}

Implements ValidatingTransport.

func (*AttestorValidatingTransport) GetValidatedAttestations

func (avt *AttestorValidatingTransport) GetValidatedAttestations(image string) ([]attestation.ValidatedAttestation, error)

type Config

type Config struct {
	Validate  securitypolicy.ValidateFunc
	Secret    secrets.Fetcher
	Auths     authority.Fetcher
	Strategy  violation.Strategy
	IsWebhook bool
}

type Reviewer

type Reviewer struct {
	// contains filtered or unexported fields
}

func New

func New(c *Config) Reviewer

func (Reviewer) ReviewGAP

func (r Reviewer) ReviewGAP(images []string, gaps []v1beta1.GenericAttestationPolicy, pod *v1.Pod, c metadata.ReadOnlyClient) error

ReviewGAP reviews images against generic attestation policies Returns error if violations are found and handles them per violation strategy

func (Reviewer) ReviewISP

func (r Reviewer) ReviewISP(images []string, isps []v1beta1.ImageSecurityPolicy, pod *v1.Pod, c metadata.ReadWriteClient) error

ReviewISP reviews images against image security policies Returns error if violations are found and handles them per violation strategy

type ValidatingTransport

type ValidatingTransport interface {
	GetValidatedAttestations(image string) ([]attestation.ValidatedAttestation, error)
}

ValidatingTransport allows the caller to obtain validated attestations for a given container image. Implementations should return trusted and verified attestations.