bundle

Oct 31, 2026

Changes in this version

+ const AlgECDSAP256

+ const AlgEd25519

+ const AnnSigKeyID

+ var Algorithms = []string

+ func KeyID(v Verifier) string

+ func MarshalPublicKeyPEM(v PublicKeyVerifier) ([]byte, error)

+ func VerifyAs(ctx context.Context, v Verifier, alg, msg string, sig []byte) error

+ type ECDSASigner struct

+ Key *ecdsa.PrivateKey

+ func (ECDSASigner) Type() string

+ func (s ECDSASigner) Sign(_ context.Context, msg string) ([]byte, error)

+ func (s ECDSASigner) Verifier() Verifier

+ type ECDSAVerifier struct

+ Key *ecdsa.PublicKey

+ func (ECDSAVerifier) Type() string

+ func (v ECDSAVerifier) PublicKey() crypto.PublicKey

+ func (v ECDSAVerifier) Verify(_ context.Context, msg string, sig []byte) error

type Ed25519Signer

+ func (s Ed25519Signer) Verifier() Verifier

type Ed25519Verifier

+ func (v Ed25519Verifier) PublicKey() crypto.PublicKey

+ type KeySigner interface

+ Verifier func() Verifier

+ func ParseSigner(privPEM []byte) (KeySigner, error)

+ type Keyring []PublicKeyVerifier

+ func (k Keyring) Algorithms() []string

+ func (k Keyring) Type() string

+ func (k Keyring) Verify(ctx context.Context, msg string, sig []byte) error

+ func (k Keyring) VerifyAlg(ctx context.Context, alg, msg string, sig []byte) error

+ type PublicKeyVerifier interface

+ PublicKey func() crypto.PublicKey

+ func ParseVerifier(pubPEM []byte) (PublicKeyVerifier, error)

+ func ParseVerifierDER(der []byte) (PublicKeyVerifier, error)

+ func VerifierFor(k crypto.PublicKey) (PublicKeyVerifier, error)

Oct 29, 2026

Changes in this version

+ const AttestationArtifactType

+ func PullAttestations(ctx context.Context, src oras.ReadOnlyGraphTarget, tag string, v Verifier) (*release.Release, []*release.Attestations, error)

Oct 3, 2026

Changes in this version

+ const AnnSigType

+ const AnnSignature

+ const ArtifactType

+ const ConfigMediaType

+ const DefaultMaxLayerSize

+ const DefaultPointerTTL

+ const LayerMediaType

+ const PointerArtifactType

+ const PointerConfigType

+ func DefaultPointerStatePath() (string, error)

+ func ExecRunner(ctx context.Context, name string, args ...string) ([]byte, error)

+ func GenerateKeyPair() (privPEM, pubPEM []byte, err error)

+ func ParseRef(ref string) (repo, tag string)

+ func PointerChannels(ctx context.Context, src oras.ReadOnlyTarget, v Verifier, p Pointer) ([]string, error)

+ func PointerTag(ring string) string

+ func Publish(ctx context.Context, dst oras.Target, rel *release.Release, s Signer, ...) (ocispec.Descriptor, error)

+ func PublishChannel(ctx context.Context, dst oras.Target, v *release.Release, s Signer, ...) (string, error)

+ func PublishRing(ctx context.Context, dst oras.Target, rel *release.Release, ...) (ocispec.Descriptor, []string, error)

+ func Pull(ctx context.Context, src oras.ReadOnlyTarget, tag string, v Verifier) (*release.Release, error)

+ func Repository(repoRef string, plainHTTP bool) (*remote.Repository, error)

+ func RingTag(ring string) string

+ func Stage(ctx context.Context, dst oras.Target, rel *release.Release, s Signer) (already bool, err error)

+ func VersionTag(ver string) string

+ type Cosign struct

+ Bin string

+ Key string

+ Keyless bool

+ Runner Runner

+ func (Cosign) Type() string

+ func (c Cosign) Sign(ctx context.Context, digest string) ([]byte, error)

+ func (c Cosign) Verify(ctx context.Context, digest string, sig []byte) error

+ type Ed25519Signer struct

+ Key ed25519.PrivateKey

+ func ParseEd25519Signer(privPEM []byte) (Ed25519Signer, error)

+ func (Ed25519Signer) Type() string

+ func (s Ed25519Signer) Sign(_ context.Context, digest string) ([]byte, error)

+ type Ed25519Verifier struct

+ Key ed25519.PublicKey

+ func ParseEd25519Verifier(pubPEM []byte) (Ed25519Verifier, error)

+ func (Ed25519Verifier) Type() string

+ func (v Ed25519Verifier) Verify(_ context.Context, digest string, sig []byte) error

+ type MultiSigner []Signer

+ func (m MultiSigner) Sign(ctx context.Context, d string) ([]byte, error)

+ func (m MultiSigner) Type() string

+ type Pointer struct

+ Digest string

+ ExpiresAt time.Time

+ IssuedAt time.Time

+ Manifest string

+ ManifestSize int64

+ Org string

+ Ring string

+ Seq uint64

+ func PromoteRing(ctx context.Context, t oras.Target, from Source, ring string, s Signer, ...) ([]Pointer, error)

+ func PullRing(ctx context.Context, src oras.ReadOnlyTarget, v Verifier, o RingOptions) (*release.Release, Pointer, error)

+ func ReadPointer(ctx context.Context, src oras.ReadOnlyTarget, ring string, v Verifier) (p Pointer, found bool, err error)

+ func RefreshRing(ctx context.Context, t oras.Target, ring string, s Signer, ...) ([]Pointer, error)

+ func ServedPointer(ctx context.Context, src oras.ReadOnlyTarget, s Signer, ring string) (p Pointer, found bool, err error)

+ type PointerMark struct

+ Digest string

+ IssuedAt time.Time

+ Seq uint64

+ type PointerOptions struct

+ AdoptExisting bool

+ BeforeSign func(p Pointer, version string)

+ ExpectDigest string

+ State *PointerState

+ type PointerState struct

+ func LoadPointerState(path, scope string) (*PointerState, error)

+ func (s *PointerState) Mark(ring string) (PointerMark, bool)

+ type RingOptions struct

+ LastDigest string

+ MaxLayerSize int64

+ MinSeq uint64

+ Now time.Time

+ Org string

+ Ring string

+ type Runner func(ctx context.Context, name string, args ...string) ([]byte, error)

+ type Signer interface

+ Sign func(ctx context.Context, digest string) ([]byte, error)

+ Type func() string

+ type Source struct

+ Manifest string

+ Ring string

+ Version string

+ func (src Source) String() string

+ type Verifier interface

+ Type func() string

+ Verify func(ctx context.Context, digest string, sig []byte) error