Help us shape the future of Go! Take the 2026 Go Developer Survey

Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

extension

package

Go to main page

Versions in this module

v0

v0.4.26

Oct 26, 2026

v0.4.25

Oct 15, 2026

v0.4.24

Oct 10, 2026

v0.4.23

Oct 8, 2026

v0.4.22

Oct 6, 2026

Changes in this version

+ const CycloneDXPredicateV1

+ const InTotoStatementV1

+ const SLSAProvenanceV1

+ const SPDXPredicateV2

+ const TrustVersion

+ type ArtifactReader interface

+ Open func(context.Context, string) (io.ReadCloser, error)

type Catalog

+ func (c Catalog) ResolveVerified(ctx context.Context, request ResolveRequest, policy TrustPolicy, ...) (Resolution, error)

type Family

+ const FamilyDelivery

+ const FamilyRuntime

+ const FamilyTargetAccess

+ const FamilyWorkloadSource

+ type JWSVerifier struct

+ Keys map[string]PublisherKey

+ Reader ArtifactReader

+ func (v JWSVerifier) Verify(ctx context.Context, metadata Metadata) (Verification, error)

type Provenance

+ Publisher string

+ type PublisherKey struct

+ PublicKey any

+ Publisher string

type Resolution

+ Decision TrustDecision

+ Verification Verification

+ type TrustDecision struct

+ Code string

+ Next string

+ PolicyReference string

+ SchemaVersion string

+ Status TrustStatus

+ type TrustError struct

+ Code string

+ Next string

+ func (e *TrustError) Error() string

type TrustPolicy

+ AllowedPublishers []string

+ Reference string

+ RequireVerification bool

+ func (p TrustPolicy) Evaluate(metadata Metadata, verification Verification) TrustDecision

+ type TrustStatus string

+ const TrustDenied

+ const TrustTrusted

+ type Verification struct

+ AttestationVerified bool

+ Code string

+ Digest string

+ Next string

+ Publisher string

+ SBOMVerified bool

+ SchemaVersion string

+ SignatureVerified bool

+ Status VerificationStatus

+ func VerifyArtifact(ctx context.Context, metadata Metadata, verifier Verifier) Verification

+ type VerificationStatus string

+ const VerificationInvalid

+ const VerificationUnverifiable

+ const VerificationVerified

+ type Verifier interface

+ Verify func(context.Context, Metadata) (Verification, error)

v0.4.21

Oct 5, 2026

v0.4.20

Oct 2, 2026

v0.4.19

Oct 2, 2026

v0.4.18

Oct 1, 2026

Changes in this version

+ const DescriptorVersion

+ const JSONSchema202012

+ type Artifact struct

+ Digest string

+ MediaType string

+ OCIReference string

+ func (a Artifact) Validate() error

+ type Catalog struct

+ func NewCatalog(entries ...Metadata) (Catalog, error)

+ func (c Catalog) Resolve(request ResolveRequest, policy TrustPolicy) (Resolution, error)

+ type Compatibility struct

+ BaseHarbor string

+ Contracts []string

+ Platforms []Platform

+ func (c Compatibility) Validate() error

+ type Family string

+ const FamilyDevelopment

+ const FamilyProvider

+ type Metadata struct

+ Artifact Artifact

+ Compatibility Compatibility

+ ConfigurationSchema SchemaReference

+ Family Family

+ ID string

+ Provenance Provenance

+ SchemaVersion string

+ Version string

+ func (m Metadata) Validate() error

+ type Platform struct

+ Arch string

+ OS string

+ type Provenance struct

+ AttestationRef string

+ SBOMRef string

+ SignatureRef string

+ type Resolution struct

+ Metadata Metadata

+ Trusted bool

+ type ResolveRequest struct

+ Digest string

+ ID string

+ Version string

+ type SchemaReference struct

+ Dialect string

+ URI string

+ func (s SchemaReference) Validate() error

+ type TrustPolicy struct

+ RequireAttestation bool

+ RequireDigest bool

+ RequireSBOM bool

+ RequireSignature bool

+ func (p TrustPolicy) Validate(metadata Metadata) error