signature

package

v2.3.2 Latest Latest Go to latest Published: Jun 8, 2026 License: Apache-2.0 Imports: 28 Imported by: 0

Details

Package signature implements image signature verification for Crossplane packages.

This section is empty.

This section is empty.

This section is empty.

type CosignValidator struct {
	// contains filtered or unexported fields
}

CosignValidator validates image signatures using cosign.

func NewCosignValidator(c client.Reader, k kubernetes.Interface, namespace, serviceAccount string) (*CosignValidator, error)

NewCosignValidator returns a new CosignValidator.

func (c *CosignValidator) Validate(ctx context.Context, ref name.Reference, config *v1beta1.ImageVerification, pullSecrets ...string) error

Validate validates the image signature.

type NopValidator struct{}

NopValidator is a Validator that always succeeds.

func (NopValidator) Validate(context.Context, name.Reference, *v1beta1.ImageVerification, ...string) error

Validate always returns nil, skipping signature verification.

type Validator interface {
	Validate(ctx context.Context, ref name.Reference, config *v1beta1.ImageVerification, pullSecrets ...string) error
}

Validator validates image signatures.