Versions in this module Expand all Collapse all v2 v2.2.2 Oct 12, 2026 v2.2.1 Oct 2, 2026 Changes in this version + var ErrInternalNetworkBlocked = errors.New("plugin command targets internal network address") + var ErrInvalidHost = errors.New("invalid or malformed host address") + var ErrInvalidSignature = errors.New("invalid or corrupted signature") + var ErrNoPublicKey = errors.New("no public key specified for signature verification") + var ErrPublicKeyNotFound = errors.New("public key not found") + var ErrSecurityNotAvailable = errors.New("advanced plugin security features require Enterprise Edition") + var ErrSignatureVerificationFailed = errors.New("plugin signature verification failed") + func IsEnterpriseAvailable() bool + func IsEnterpriseRequired(err error) bool + func IsSecurityError(err error) bool + func RegisterEnterpriseFactory(factory ServiceFactory) + func ValidateCommand(command string, securityService Service) error + type Config struct + AllowInternalNetworkAccess bool + OCIConfig *ociplugins.OCIConfig + type GRPCValidationResult struct + Allowed bool + Host string + Reason string + type OCIReference = ociplugins.OCIReference + type SecurityContext struct + AllowOverrides bool + Context context.Context + type Service interface + GetPublicKeyPath func(pubKeyID string) (string, error) + IsInternalIP func(host string) bool + LoadPublicKeysFromDirectory func(dir string) ([]string, error) + ValidateGRPCHost func(host string) error + ValidatePublicKey func(keyPath string) error + VerifyBundle func(ctx context.Context, ref *OCIReference, issuer, subject string) error + VerifySignature func(ctx context.Context, ref *OCIReference, pubKeyID string) error + VerifyWithPolicy func(ctx context.Context, ref *OCIReference, policyPath string) error + func NewService(config *Config) Service + type ServiceFactory func(config *Config) Service + type VerificationResult struct + Error error + Method string + PublicKey string + Verified bool
Go to main page