package verifier

import "github.com/moby/policy-helpers"

Index ¶

• type ArtifactVerifyOpt
• func WithSLSANotRequired() ArtifactVerifyOpt
• type ArtifactVerifyOpts
• type Config
• type NoSigChainError
• func (e *NoSigChainError) Error() string
• type Verifier
• func NewVerifier(cfg Config) (*Verifier, error)
• func (v *Verifier) VerifyArtifact(ctx context.Context, dgst digest.Digest, bundleBytes []byte, opt ...ArtifactVerifyOpt) (*types.SignatureInfo, error)
• func (v *Verifier) VerifyImage(ctx context.Context, provider image.ReferrersProvider, desc ocispecs.Descriptor, platform *ocispecs.Platform) (*types.SignatureInfo, error)

Types ¶

type ArtifactVerifyOpt ¶

type ArtifactVerifyOpt func(*ArtifactVerifyOpts)

func WithSLSANotRequired ¶

func WithSLSANotRequired() ArtifactVerifyOpt

type ArtifactVerifyOpts ¶

type ArtifactVerifyOpts struct {
	SLSANotRequired bool
}

type Config ¶

type Config struct {
	UpdateInterval time.Duration
	RequireOnline  bool
	StateDir       string
}

type NoSigChainError ¶

type NoSigChainError struct {
	Target         digest.Digest
	HasAttestation bool
}

func (*NoSigChainError) Error ¶

func (e *NoSigChainError) Error() string

type Verifier ¶

type Verifier struct {
	// contains filtered or unexported fields
}

func NewVerifier ¶

func NewVerifier(cfg Config) (*Verifier, error)

func (*Verifier) VerifyArtifact ¶

func (v *Verifier) VerifyArtifact(ctx context.Context, dgst digest.Digest, bundleBytes []byte, opt ...ArtifactVerifyOpt) (*types.SignatureInfo, error)

func (*Verifier) VerifyImage ¶

func (v *Verifier) VerifyImage(ctx context.Context, provider image.ReferrersProvider, desc ocispecs.Descriptor, platform *ocispecs.Platform) (*types.SignatureInfo, error)

Source Files ¶

errors.go hashedrecordbundle.go verifier.go

Directories ¶