sigstore

Documentation

Overview

Package sigstore provides a client for verifying artifacts using sigstore

Index

• Constants
• type Sigstore
  • func New(trustedRoot, accessToken, cacheDir string) (*Sigstore, error)
  • func (s *Sigstore) VerifyContainer(ctx context.Context, registry, owner, artifact, version string) (json.RawMessage, json.RawMessage, error)

Constants

const (
	// SigstorePublicTrustedRootRepo is the public trusted root repository for sigstore
	SigstorePublicTrustedRootRepo = "tuf-repo-cdn.sigstore.dev"
)

Types

type Sigstore

type Sigstore struct {
	// contains filtered or unexported fields
}

Sigstore is the sigstore verifier

func New

func New(trustedRoot, accessToken, cacheDir string) (*Sigstore, error)

New creates a new Sigstore verifier

func (*Sigstore) VerifyContainer

func (s *Sigstore) VerifyContainer(ctx context.Context, registry, owner, artifact, version string) (
	json.RawMessage, json.RawMessage, error)

VerifyContainer verifies a container artifact using sigstore