dsse

package
v0.2.5 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Oct 17, 2025 License: Apache-2.0 Imports: 12 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type Envelope

type Envelope struct {
	Signatures []attestation.Signature `json:"signatures"`
	Statement  attestation.Statement   `json:"-"`
	*sigstoreProtoDSSE.Envelope
}

func (*Envelope) GetCertificate

func (env *Envelope) GetCertificate() attestation.Certificate

func (*Envelope) GetPredicate

func (env *Envelope) GetPredicate() attestation.Predicate

func (*Envelope) GetSignatures

func (env *Envelope) GetSignatures() []attestation.Signature

func (*Envelope) GetStatement

func (env *Envelope) GetStatement() attestation.Statement

GetStatement parses the envelope state, stetement.

func (*Envelope) GetVerification

func (env *Envelope) GetVerification() attestation.Verification

GetVerifications returns the envelop signtature verifications

func (*Envelope) Verify

func (env *Envelope) Verify(args ...any) error

Verify checks the payload using the supplied signatures. The function takes either a slice of, or individual key.PublicKeyProvider objects. For more information see the carabiner signer public key library:

https://github.com/carabiner-dev/signer/blob/main/key/public.go

No signatures should not return an error, a verification status is returned but without any identities matched.

type Parser

type Parser struct{}

Parser for attestations wrapped in DSSE envelopes

func (*Parser) FileExtensions

func (p *Parser) FileExtensions() []string

FileExtensions returns the file extennsions this parser will look at.

func (*Parser) ParseStream

func (p *Parser) ParseStream(r io.Reader) ([]attestation.Envelope, error)

ParseFile parses a file and returns all envelopes in it.

type Signature

type Signature struct {
	KeyID     string
	Signature []byte
}

Signature is a clone of the dsse signature struct that can be copied around

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL