bnd

May 21, 2025

Changes in this version

type Verifier

+ func (v *Verifier) VerifyParsedBundle(bndl *bundle.Bundle) (*verify.VerificationResult, error)

Mar 28, 2025

Changes in this version

+ const GitHubTimeStamperURL

+ const SigstorePublicGoodBaseURL

+ var DefaultSignerOptions = SignerOptions

+ var DefaultVerifierOptions = VerificationOptions

+ func GetTufClient(opts *TufOptions) (*tuf.Client, error)

+ func GetTufRoot(opts *TufOptions) ([]byte, error)

+ type BundleSigner interface

+ BuildSigstoreSignerOptions func(*SignerOptions) (*sign.BundleOptions, error)

+ GetAmbienTokens func(*SignerOptions) error

+ GetKeyPair func(*SignerOptions) (*sign.EphemeralKeypair, error)

+ GetOidcToken func(*SignerOptions) error

+ SignBundle func(content sign.Content, keypair sign.Keypair, opts *sign.BundleOptions) (*v1.Bundle, error)

+ VerifyContent func(*SignerOptions, []byte) error

+ WrapStatement func([]byte) *sign.DSSEData

+ type BundleVerifier interface

+ BuildSigstoreVerifier func(*VerificationOptions) (VerifyCapable, error)

+ OpenBundle func(string) (*bundle.Bundle, error)

+ RunVerification func(*VerificationOptions, VerifyCapable, *bundle.Bundle) (*verify.VerificationResult, error)

+ type Signer struct

+ Options SignerOptions

+ func NewSigner() *Signer

+ func (s *Signer) SignStatement(data []byte) (*v1.Bundle, error)

+ func (s *Signer) WriteBundle(bndl *v1.Bundle, w io.Writer) error

+ type SignerOptions struct

+ AppendToRekor bool

+ DisableSTS bool

+ OidcClientID string

+ OidcClientSecret string

+ OidcIssuer string

+ OidcRedirectURL string

+ Timestamp bool

+ Token *oauthflow.OIDCIDToken

+ func (so *SignerOptions) Validate() error

+ type TufOptions struct

+ Fetcher fetcher.Fetcher

+ TufRootPath string

+ TufRootURL string

+ type VerificationOptions struct

+ ArtifactDigest string

+ ArtifactDigestAlgo string

+ ExpectedIssuer string

+ ExpectedIssuerRegex string

+ ExpectedSan string

+ ExpectedSanRegex string

+ RequireCTlog bool

+ RequireTimestamp bool

+ RequireTlog bool

+ SkipIdentityCheck bool

+ type Verifier struct

+ Options VerificationOptions

+ func NewVerifier() *Verifier

+ func (v *Verifier) VerifyBundle(bundlePath string) (*verify.VerificationResult, error)

+ func (v *Verifier) VerifyInlineBundle(bundleContents []byte) (*verify.VerificationResult, error)

+ type VerifyCapable interface

+ Verify func(verify.SignedEntity, verify.PolicyBuilder) (*verify.VerificationResult, error)