Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Defaultfetcher ¶
Defaultfetcher returns a default TUF fetcher configured with the bind UA
func GetClient ¶
func GetClient(opts *TufOptions) (*tuf.Client, error)
GetClient returns a TUF client configured with the options. The underlying tuf.New call is retried with exponential backoff on transient errors (see the tufInit* constants for rationale); the last error is returned after exhausting attempts so legitimate configuration problems still surface.
When a valid TUF cache is already present on disk (e.g. pre-baked into an air-gapped image), ForceCache is enabled so sigstore-go uses the local copy and never makes a network call. ForceCache only disables proactive refresh — sigstore-go still re-fetches on its own when metadata has actually expired, so this is safe by default.
func GetRoot ¶
func GetRoot(opts *TufOptions) ([]byte, error)
GetRoot fetches the trusted root from the configured URL or from the sigstore public instance.
Source Files