Help us shape the future of Go! Take the 2026 Go Developer Survey

Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

signer

package module

Go to main page

Versions in this module

v0

v0.6.4

Oct 4, 2026

v0.6.3

Oct 4, 2026

Changes in this version

+ var ErrUnknownArtifact = errors.New("data is not a sigstore bundle or a DSSE envelope")

+ type ArtifactKind string

+ const ArtifactKindBundle

+ const ArtifactKindEnvelope

+ type Backend interface

+ Name func() options.Backend

+ SignMessage func(data []byte, funcs ...options.SignOptFn) (SignedArtifact, error)

+ SignStatement func(data []byte, funcs ...options.SignOptFn) (SignedArtifact, error)

+ type BundleArtifact struct

+ Bundle *sbundle.Bundle

+ func (b *BundleArtifact) Kind() ArtifactKind

+ func (b *BundleArtifact) MediaType() string

+ func (b *BundleArtifact) WriteTo(w io.Writer) (int64, error)

+ type EnvelopeArtifact struct

+ Envelope *sdsse.Envelope

+ Raw []byte

+ SignatureCerts [][]byte

+ func (e *EnvelopeArtifact) Kind() ArtifactKind

+ func (e *EnvelopeArtifact) MediaType() string

+ func (e *EnvelopeArtifact) WriteTo(w io.Writer) (int64, error)

+ type SignedArtifact interface

+ Kind func() ArtifactKind

+ MediaType func() string

+ WriteTo func(w io.Writer) (int64, error)

+ func ParseArtifact(data []byte) (SignedArtifact, error)

+ type Signer struct

+ Credentials bundle.CredentialProvider

+ Options options.Signer

+ func NewSigner() *Signer

+ func NewSignerFromSet(set *options.SignerSet) (*Signer, error)

+ func (s *Signer) CertifiedKey(ctx context.Context) (leaf *x509.Certificate, chain []*x509.Certificate, key crypto.Signer, ...)

+ func (s *Signer) Close() error

+ func (s *Signer) SignEnvelope(envelope *sdsse.Envelope, funcs ...options.SignOptFn) error

+ func (s *Signer) SignMessage(data []byte, funcs ...options.SignOptFn) (SignedArtifact, error)

+ func (s *Signer) SignMessageBundle(data []byte, funcs ...options.SignOptFn) (*sbundle.Bundle, error)

+ func (s *Signer) SignMessageToDSSE(data []byte, funcs ...options.SignOptFn) (*sdsse.Envelope, error)

+ func (s *Signer) SignStatement(data []byte, funcs ...options.SignOptFn) (SignedArtifact, error)

+ func (s *Signer) SignStatementBundle(data []byte, funcs ...options.SignOptFn) (*sbundle.Bundle, error)

+ func (s *Signer) SignStatementToDSSE(data []byte, funcs ...options.SignOptFn) (*sdsse.Envelope, error)

+ func (s *Signer) WriteBundle(bndl *sbundle.Bundle, w io.Writer) error

+ func (s *Signer) WriteDSSEEnvelope(env *sdsse.Envelope, w io.Writer) error

+ type Verifier struct

+ Options options.Verifier

+ func NewVerifier(fnOpts ...options.VerifierOptFunc) *Verifier

+ func NewVerifierFromSet(set *options.VerifierSet) (*Verifier, error)

+ func (v *Verifier) VerifyBundle(bundlePath string, fnOpts ...options.VerificationOptFunc) (*verify.VerificationResult, error)

+ func (v *Verifier) VerifyDSSE(path string, keys []key.PublicKeyProvider, ...) (*key.VerificationResult, error)

+ func (v *Verifier) VerifyInlineBundle(bundleContents []byte, fnOpts ...options.VerificationOptFunc) (*verify.VerificationResult, error)

+ func (v *Verifier) VerifyParsedBundle(bndl *sbundle.Bundle, fnOpts ...options.VerificationOptFunc) (*verify.VerificationResult, error)

+ func (v *Verifier) VerifyParsedDSSE(env *sdsse.Envelope, keys []key.PublicKeyProvider, ...) (*key.VerificationResult, error)

+ func (v *Verifier) VerifyStatement(art SignedArtifact, fnOpts ...options.VerificationOptFunc) (*api.Verification, error)

+ func (v *Verifier) VerifyStatementBytes(data []byte, fnOpts ...options.VerificationOptFunc) (*api.Verification, error)