cosign

Documentation

Index

• Variables
• func ClearMock()
• func SetMock(image string, data [][]byte) error
• type Cosign
• type CosignError
• type Options
• type Response
  • func FetchAttestations(opts Options) (*Response, error)
  • func VerifySignature(opts Options) (*Response, error)

Variables

var ImageSignatureRepository string

ImageSignatureRepository is an alternate signature repository

Functions

func ClearMock

func ClearMock()

func SetMock

func SetMock(image string, data [][]byte) error

Types

type Cosign

type Cosign interface {
	VerifyImageSignatures(ctx context.Context, signedImgRef name.Reference, co *cosign.CheckOpts) ([]oci.Signature, bool, error)

	VerifyImageAttestations(ctx context.Context, signedImgRef name.Reference, co *cosign.CheckOpts) (checkedAttestations []oci.Signature, bundleVerified bool, err error)
}

type CosignError

type CosignError struct{}

type Options

type Options struct {
	ImageRef             string
	FetchAttestations    bool
	Key                  string
	Cert                 string
	CertChain            string
	Roots                string
	Subject              string
	Issuer               string
	AdditionalExtensions map[string]string
	Annotations          map[string]string
	Repository           string
	RekorURL             string
	SignatureAlgorithm   string
	PredicateType        string
}

type Response

type Response struct {
	Digest     string
	Statements []map[string]interface{}
}

func FetchAttestations

func FetchAttestations(opts Options) (*Response, error)

FetchAttestations retrieves signed attestations and decodes them into in-toto statements https://github.com/in-toto/attestation/blob/main/spec/README.md#statement

func VerifySignature

func VerifySignature(opts Options) (*Response, error)

VerifySignature verifies that the image has the expected signatures