attestation

Aug 14, 2024

Changes in this version

+ func WithReferrersRepo(repo string) func(*ReferrersResolver) error

+ type AnnotatedStatement struct

+ Annotations map[string]string

+ InTotoStatement *intoto.Statement

+ OCIDescriptor *v1.Descriptor

+ func ExtractAnnotatedStatements(path string, mediaType string) ([]*AnnotatedStatement, error)

+ func ExtractStatementsFromIndex(idx v1.ImageIndex, mediaType string) ([]*AnnotatedStatement, error)

type Envelope

+ func ExtractEnvelopes(manifest *Manifest, predicateType string) ([]*Envelope, error)

+ type LayoutResolver struct

+ func NewOCILayoutResolver(src *oci.ImageSpec) (*LayoutResolver, error)

+ func (r *LayoutResolver) Attestations(_ context.Context, predicateType string) ([]*Envelope, error)

+ func (r *LayoutResolver) ImageDescriptor(_ context.Context) (*v1.Descriptor, error)

+ func (r *LayoutResolver) ImageName(_ context.Context) (string, error)

+ func (r *LayoutResolver) ImagePlatform(_ context.Context) (*v1.Platform, error)

type Manifest

+ func FetchManifest(ctx context.Context, image string, platform *v1.Platform) (*Manifest, error)

+ func ManifestsFromIndex(index v1.ImageIndex) ([]*Manifest, error)

+ func NewManifest(subject *v1.Descriptor) (*Manifest, error)

+ func (manifest *Manifest) Add(ctx context.Context, signer dsse.SignerVerifier, statement *intoto.Statement, ...) error

+ func (manifest *Manifest) BuildImage(options ...func(*ManifestImageOptions) error) (v1.Image, error)

+ type MockRegistryResolver struct

+ ImageNameStr string

+ Subject *v1.Descriptor

+ func (r *MockRegistryResolver) ImageDescriptor(_ context.Context) (*v1.Descriptor, error)

+ func (r *MockRegistryResolver) ImageName(_ context.Context) (string, error)

+ type MockResolver struct

+ Envs []*Envelope

+ func (r MockResolver) Attestations(_ context.Context, _ string) ([]*Envelope, error)

+ func (r MockResolver) ImageDescriptor(_ context.Context) (*v1.Descriptor, error)

+ func (r MockResolver) ImageName(_ context.Context) (string, error)

+ func (r MockResolver) ImagePlatform(_ context.Context) (*v1.Platform, error)

+ type Options struct

+ Attach bool

+ NoReferrers bool

+ ReferrersRepo string

+ type ReferrersResolver struct

+ func NewReferrersResolver(src oci.ImageDetailsResolver, options ...func(*ReferrersResolver) error) (*ReferrersResolver, error)

+ func (r *ReferrersResolver) Attestations(ctx context.Context, predicateType string) ([]*Envelope, error)

+ type RegistryResolver struct

+ func NewRegistryResolver(src *oci.RegistryImageDetailsResolver) (*RegistryResolver, error)

+ func (r *RegistryResolver) Attestations(ctx context.Context, predicateType string) ([]*Envelope, error)

+ type Resolver interface

+ Attestations func(ctx context.Context, mediaType string) ([]*Envelope, error)

type VSAPolicy

+ Digest map[string]string

+ DownloadLocation string

Aug 8, 2024

Changes in this version

type EmptyConfigImage

+ func (i *EmptyConfigImage) Digest() (v1.Hash, error)

Aug 1, 2024

Changes in this version

+ const DockerDSSEExtKind

+ const RekorTLExtKind

+ type DockerDSSEExtension struct

+ TL *DockerTLExtension

+ type DockerTLExtension struct

+ Data any

+ Kind string

+ type Layer struct

+ Annotations map[string]string

+ Layer v1.Layer

+ Statement *intoto.Statement

+ type Manifest struct

+ OriginalDescriptor *v1.Descriptor

+ OriginalLayers []*Layer

+ SignedLayers []*Layer

+ SubjectDescriptor *v1.Descriptor

+ SubjectName string

+ func (manifest *Manifest) AddAttestation(ctx context.Context, signer dsse.SignerVerifier, statement *intoto.Statement, ...) error

+ func (manifest *Manifest) BuildAttestationImage(options ...func(*ManifestImageOptions) error) (v1.Image, error)

+ func (manifest *Manifest) BuildReferringArtifacts() ([]v1.Image, error)

+ type ManifestImageOptions struct

type VSAPredicate

+ ResourceURI string

Jul 16, 2024

Changes in this version

+ func UpdateIndexImage(idx v1.ImageIndex, manifest *AttestationManifest, ...) (v1.ImageIndex, error)

+ func UpdateIndexImages(idx v1.ImageIndex, manifest []*AttestationManifest, ...) (v1.ImageIndex, error)

+ func WithReplacedLayers(replaceLayers bool) func(*AttestationManifestImageOptions) error

+ func WithoutSubject(skipSubject bool) func(*AttestationManifestImageOptions) error

type AttestationManifest

+ OriginalDescriptor *v1.Descriptor

+ OriginalLayers []*AttestationLayer

+ SignedLayers []*AttestationLayer

+ SubjectName string

+ func (manifest *AttestationManifest) BuildAttestationImage(options ...func(*AttestationManifestImageOptions) error) (v1.Image, error)

+ func (manifest *AttestationManifest) BuildReferringArtifacts() ([]v1.Image, error)

+ type AttestationManifestImageOptions struct

+ type EmptyConfigImage struct

+ func (i *EmptyConfigImage) Manifest() (*v1.Manifest, error)

+ func (i *EmptyConfigImage) RawConfigFile() ([]byte, error)

+ func (i *EmptyConfigImage) RawManifest() ([]byte, error)

Jul 11, 2024

Changes in this version

+ const InTotoPredicateType

+ const InTotoReferenceLifecycleStage

+ const LifecycleStageExperimental

+ func AddImageToIndex(idx v1.ImageIndex, manifest *AttestationManifest) (v1.ImageIndex, error)

+ func AddImagesToIndex(idx v1.ImageIndex, manifests []*AttestationManifest) (v1.ImageIndex, error)

type AttestationManifest

+ func (manifest *AttestationManifest) AddAttestation(ctx context.Context, signer dsse.SignerVerifier, statement *intoto.Statement, ...) error

+ func (manifest *AttestationManifest) AddOrReplaceLayer(signedLayer *AttestationLayer, opts *SigningOptions) error

type Envelope

+ func SignInTotoStatement(ctx context.Context, statement *intoto.Statement, signer dsse.SignerVerifier, ...) (*Envelope, error)

Jun 21, 2024

Changes in this version

+ const DockerReferenceDigest

type AttestationManifest

+ Descriptor v1.Descriptor

+ SubjectDescriptor *v1.Descriptor

+ type SignedAttestationImage struct

+ AttestationManifest AttestationManifest

+ Descriptor *v1.Descriptor

+ Image v1.Image

+ type SigningOptions struct

+ Replace bool

+ SkipSubject bool

+ SkipTL bool

+ type VerifyOptions struct

+ Keys []KeyMetadata

+ SkipTL bool

Apr 30, 2024

Changes in this version

+ const AttestationManifestType

+ const DockerReferenceType

+ const OCIDescriptorDSSEMediaType

+ const VSAPredicateType

+ func DSSEMediaType(predicateType string) (string, error)

+ func ToVSAResourceURI(sub intoto.Subject) (string, error)

+ type AttestationImage struct

+ Image v1.Image

+ Layers []AttestationLayer

+ type AttestationLayer struct

+ Annotations map[string]string

+ Layer v1.Layer

+ MediaType types.MediaType

+ Statement *intoto.Statement

+ func GetAttestationsFromImage(image v1.Image) ([]AttestationLayer, error)

+ type AttestationManifest struct

+ Annotations map[string]string

+ Attestation AttestationImage

+ Digest v1.Hash

+ Manifest v1.Descriptor

+ MediaType types.MediaType

+ func GetAttestationManifestsFromIndex(index v1.ImageIndex) ([]AttestationManifest, error)

+ type VSAInputAttestation struct

+ Digest map[string]string

+ MediaType string

+ type VSAOptions struct

+ BuildLevel string

+ PolicyURI string

+ VerifierID string

+ type VSAPolicy struct

+ URI string

+ type VSAPredicate struct

+ InputAttestations []VSAInputAttestation

+ Policy VSAPolicy

+ ResourceUri string

+ TimeVerified string

+ VerificationResult string

+ VerifiedLevels []string

+ Verifier VSAVerifier

+ type VSAVerifier struct

+ ID string

Apr 22, 2024

Changes in this version

+ const DockerDsseExtKind

+ const RekorTlExtKind

+ func ValidPayloadType(payloadType string) bool

+ func VerifyDSSE(ctx context.Context, env *Envelope, keys KeysMap) ([]byte, error)

+ type DockerDsseExtension struct

+ Tl DockerTlExtension

+ type DockerTlExtension struct

+ Data any

+ Kind string

+ type Envelope struct

+ Payload string

+ PayloadType string

+ Signatures []Signature

+ func SignDSSE(ctx context.Context, payload []byte, payloadType string, ...) (*Envelope, error)

+ type Extension struct

+ Ext DockerDsseExtension

+ Kind string

+ type KeyMetadata struct

+ Distrust bool

+ From time.Time

+ ID string

+ PEM string

+ SigningFormat string

+ Status string

+ To *time.Time

+ type Keys []KeyMetadata

+ type KeysMap map[string]KeyMetadata

+ type Signature struct

+ Extension Extension

+ KeyID string

+ Sig string