pkgverify

package
v0.1.18 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Aug 26, 2026 License: Apache-2.0, MIT Imports: 12 Imported by: 0

Documentation

Overview

Package pkgverify verifies producer-native RPM and APK package signatures through fixed, networkless container invocations and producer public keys.

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type Options

type Options struct {
	// DockerPath overrides the docker executable. Empty resolves "docker" from PATH.
	DockerPath string
	// FedoraImage overrides the pinned RPM verification image.
	FedoraImage string
	// AlpineImage overrides the pinned APK verification image.
	AlpineImage string
	// Environ is the child process environment. Nil inherits the parent.
	Environ []string
	// Stderr receives live container diagnostics. Nil discards them.
	Stderr io.Writer
}

Options configures a Verifier.

type Verifier

type Verifier struct {
	// contains filtered or unexported fields
}

Verifier checks producer-native package signatures in isolated containers.

func New

func New(options Options) *Verifier

New constructs a Verifier with stable image defaults.

func (*Verifier) Verify

func (v *Verifier) Verify(ctx context.Context, request pkgrepo.VerificationRequest) error

Verify implements pkgrepo.Verifier.

Directories

Path Synopsis
Package mocks provides generated native package verification test doubles.
Package mocks provides generated native package verification test doubles.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL