sign

package
v1.234.0-rc.1 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Nov 5, 2026 License: Apache-2.0 Imports: 31 Imported by: 0

Documentation

Overview

Package sign signs immutable plugin releases and publishes Sigstore evidence.

Index

Constants

View Source 
const (
	DefaultVersion = "3.1.3"
)

DefaultVersion pins the managed signer to a release supporting modern bundles.

Variables

This section is empty.

Functions

This section is empty.

Types

type BlobSigner 

type BlobSigner interface {
	Sign(context.Context, []byte) ([]byte, error)
}

BlobSigner produces a standard Sigstore bundle for the exact supplied bytes.

type Cosign 

type Cosign struct {
	Config  *schema.AtmosConfiguration
	Version string
	Yes     bool
	Resolve func(context.Context, *schema.AtmosConfiguration, string) (string, error)
	Run     func(context.Context, string, []string) error
}

Cosign uses a managed executable and the public Sigstore keyless signing flow. Resolve and Run are injectable subprocess boundaries for isolated tests.

func (Cosign) Sign 

func (c Cosign) Sign(ctx context.Context, raw []byte) ([]byte, error)

Sign creates a modern Sigstore bundle without giving Cosign registry credentials.

type Service 

type Service struct {
	Registry    oci.Registry
	Signer      BlobSigner
	Descriptors *extension.Registry
}

Service separates signing from registry credentials and release validation.

func (Service) Release 

func (s Service) Release(ctx context.Context, reference string) (*pluginoci.Release, error)

Release validates a plugin index and attaches a signature to its immutable digest. Tags are intentionally rejected so a concurrent publisher cannot change the subject.

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.