utils

func CleanupWorkDir ¶

func CleanupWorkDir(fs afero.Fs, path string)

CleanupWorkDir removes all files in a directory Eat any errors so we can call it from defer

func CreateWorkDir ¶

func CreateWorkDir(fs afero.Fs) (string, error)

CreateWorkDir creates the working directory in tmp and some subdirectories

func Experimental ¶

func Experimental() bool

detect if the EC_EXPERIMENTAL env var is set to enable experimental features

func FS ¶

func FS(ctx context.Context) afero.Fs

func HasJsonOrYamlExt ¶

func HasJsonOrYamlExt(str string) bool

func HasSuffix ¶

func HasSuffix(str string, extensions []string) bool

func IsFile ¶

func IsFile(ctx context.Context, path string) (bool, error)

func IsJson ¶

func IsJson(data string) bool

detect if the string is json

func IsOpaEnabled ¶

func IsOpaEnabled() bool

func IsYamlMap ¶

func IsYamlMap(data string) bool

detect if the string is yamlMap

func KeyFromKeyRef ¶ added in v0.8.36

func KeyFromKeyRef(ctx context.Context, keyRef string, fs afero.Fs) ([]byte, error)

KeyFromKeyRef resolves a key from either a file path or a Kubernetes secret reference. This provides a unified interface for both public and private key resolution. Supported formats: - File path: "/path/to/key.pem" - Kubernetes secret: "k8s://namespace/secret-name/key-field" (explicit key field) - Kubernetes secret: "k8s://namespace/secret-name" (auto-select if single key exists)

func PasswordFromKeyRef ¶ added in v0.8.77

func PasswordFromKeyRef(ctx context.Context, keyRef string) ([]byte, error)

PasswordFromKeyRef resolves a password from either environment variable or a Kubernetes secret reference. This provides a unified interface for password resolution similar to PrivateKeyFromKeyRef. Supported formats: - Environment variable: "" (empty string uses COSIGN_PASSWORD env var) - Kubernetes secret: "k8s://namespace/secret-name" (assumes "cosign.password" key) - Kubernetes secret: "k8s://namespace/secret-name/key-field" (explicit key field)

func PrivateKeyFromKeyRef ¶ added in v0.8.36

func PrivateKeyFromKeyRef(ctx context.Context, keyRef string, fs afero.Fs) ([]byte, error)

PrivateKeyFromKeyRef resolves a private key from either a file path or a Kubernetes secret reference. This follows the same pattern as cosignSig.PublicKeyFromKeyRef but for private keys. Supported formats: - File path: "/path/to/private-key.pem" - Kubernetes secret: "k8s://namespace/secret-name" - Kubernetes secret: "k8s://namespace/secret-name/key-field"

func PublicKeyFromKeyRef ¶ added in v0.8.36

func PublicKeyFromKeyRef(ctx context.Context, keyRef string, fs afero.Fs) ([]byte, error)

PublicKeyFromKeyRef resolves a public key from either a file path or a Kubernetes secret reference. This provides a consistent interface with PrivateKeyFromKeyRef. Supported formats: - File path: "/path/to/public-key.pem" - Kubernetes secret: "k8s://namespace/secret-name/key-field" (explicit key field) - Kubernetes secret: "k8s://namespace/secret-name" (auto-select if single key exists)

func RenderFromTemplatesWithGlob ¶

func RenderFromTemplatesWithGlob(input any, main string, glob []string, efs embed.FS) ([]byte, error)

func RenderFromTemplatesWithMain ¶

func RenderFromTemplatesWithMain(input any, main string, efs embed.FS) ([]byte, error)

func SetColorEnabled ¶

func SetColorEnabled(flagNoColor, flagForceColor bool)

func SetupTemplate ¶

func SetupTemplate(efs embed.FS) (*template.Template, error)

Here we assume the caller will do the Execute or ExecuteTemplate themselves

func SetupTemplateWithGlob ¶

func SetupTemplateWithGlob(glob []string, efs embed.FS) (*template.Template, error)

func WithFS ¶

func WithFS(ctx context.Context, fs afero.Fs) context.Context

func WriteTempFile ¶

func WriteTempFile(ctx context.Context, data, prefix string) (string, error)

create a file in a temp dir with contents of data