options

type AnnotationOptions struct {
	Annotations []string
}

type AttachAttestationOptions struct {
	Attestations []string
	Registry     RegistryOptions
}

type AttachSBOMOptions struct {
	SBOM            string
	SBOMType        string
	SBOMInputFormat string
	Registry        RegistryOptions
}

type AttachSignatureOptions struct {
	Signature string
	Payload   string
	Registry  RegistryOptions
}

type AttestBlobOptions struct {
	Key               string
	Hash              string
	OutputSignature   string
	OutputAttestation string

	Predicate PredicateLocalOptions
}

type AttestOptions struct {
	Key              string
	Cert             string
	CertChain        string
	NoUpload         bool
	Force            bool
	Recursive        bool
	Replace          bool
	SkipConfirmation bool
	NoTlogUpload     bool

	Rekor       RekorOptions
	Fulcio      FulcioOptions
	OIDC        OIDCOptions
	SecurityKey SecurityKeyOptions
	Predicate   PredicateLocalOptions
	Registry    RegistryOptions
}

type CertVerifyOptions struct {
	Cert                         string
	CertEmail                    string
	CertIdentity                 string
	CertOidcIssuer               string
	CertGithubWorkflowTrigger    string
	CertGithubWorkflowSha        string
	CertGithubWorkflowName       string
	CertGithubWorkflowRepository string
	CertGithubWorkflowRef        string
	CertChain                    string
	EnforceSCT                   bool
}

type CleanOptions struct {
	Registry  RegistryOptions
	CleanType string
	Force     bool
}

type CopyOptions struct {
	SignatureOnly bool
	Force         bool
	Registry      RegistryOptions
}

type EnvOptions struct {
	ShowDescriptions    bool
	ShowSensitiveValues bool
}

type FilesOptions struct {
	Files []string
}

type FulcioOptions struct {
	URL                      string
	IdentityToken            string
	InsecureSkipFulcioVerify bool
}

type GenerateKeyPairOptions struct {
	// KMS Key Management Service
	KMS string
}

type GenerateOptions struct {
	AnnotationOptions
	Registry RegistryOptions
}

type ImportKeyPairOptions struct {
	// Local key file generated by external program such as OpenSSL
	Key string
}

type InitializeOptions struct {
	Mirror string
	Root   string
}

type Interface interface {
	// AddFlags adds this options' flags to the cobra command.
	AddFlags(cmd *cobra.Command)
}

type KeyOpts struct {
	Sk                   bool
	Slot                 string
	KeyRef               string
	FulcioURL            string
	RekorURL             string
	IDToken              string
	PassFunc             cosign.PassFunc
	OIDCIssuer           string
	OIDCClientID         string
	OIDCClientSecret     string
	OIDCRedirectURL      string
	OIDCDisableProviders bool   // Disable OIDC credential providers in keyless signer
	OIDCProvider         string // Specify which OIDC credential provider to use for keyless signer
	BundlePath           string
	SkipConfirmation     bool

	// FulcioAuthFlow is the auth flow to use when authenticating against
	// Fulcio. See https://pkg.go.dev/github.com/sigstore/cosign/cmd/cosign/cli/fulcio#pkg-constants
	// for valid values.
	FulcioAuthFlow string

	// Modeled after InsecureSkipVerify in tls.Config, this disables
	// verifying the SCT.
	InsecureSkipFulcioVerify bool
}

type KeyParseError struct{}

type Keychain = authn.Keychain

type LoadOptions struct {
	Directory string
}

type OIDCOptions struct {
	Issuer   string
	ClientID string

	RedirectURL             string
	Provider                string
	DisableAmbientProviders bool
	// contains filtered or unexported fields
}

type PIVToolAttestationOptions struct {
	Output string
	Slot   string
}

type PIVToolGenerateKeyOptions struct {
	ManagementKey string
	RandomKey     bool
	Slot          string
	PINPolicy     string
	TouchPolicy   string
}

type PIVToolSetManagementKeyOptions struct {
	OldKey    string
	NewKey    string
	RandomKey bool
}

type PIVToolSetPINOptions struct {
	OldPIN string
	NewPIN string
}

type PIVToolSetPUKOptions struct {
	OldPUK string
	NewPUK string
}

type PIVToolUnblockOptions struct {
	PUK    string
	NewPIN string
}

type PKCS11ToolListKeysUrisOptions struct {
	ModulePath string
	SlotID     uint
	Pin        string
}

type PKCS11ToolListTokensOptions struct {
	ModulePath string
}

type PolicyInitOptions struct {
	ImageRef    string
	Maintainers []string
	Issuer      string
	Threshold   int
	Expires     int
	OutFile     string
	Registry    RegistryOptions
}

type PolicySignOptions struct {
	ImageRef         string
	OutFile          string
	Registry         RegistryOptions
	Fulcio           FulcioOptions
	Rekor            RekorOptions
	SkipConfirmation bool

	OIDC OIDCOptions
}

type PredicateLocalOptions struct {
	PredicateOptions
	Path string
}

type PredicateOptions struct {
	Type string
}

type PredicateRemoteOptions struct {
	PredicateOptions
}

type PubKeyParseError struct{}

type PublicKeyOptions struct {
	Key         string
	SecurityKey SecurityKeyOptions
	OutFile     string
}

type ReferenceOptions struct {
	TagPrefix string
}

type RegistryOptions struct {
	AllowInsecure      bool
	AllowHTTPRegistry  bool
	KubernetesKeychain bool
	RefOpts            ReferenceOptions
	Keychain           Keychain
}

type RekorOptions struct {
	URL string
}

type RootOptions struct {
	OutputFile string
	Verbose    bool
	Timeout    time.Duration
}

type SBOMDownloadOptions struct {
	Platform string // Platform to download sboms
}

type SaveOptions struct {
	Directory string
}

type SecurityKeyOptions struct {
	Use  bool
	Slot string
}

type SignBlobOptions struct {
	Key               string
	Base64Output      bool
	Output            string // deprecated: TODO remove when the output flag is fully deprecated
	OutputSignature   string // TODO: this should be the root output file arg.
	OutputCertificate string
	SecurityKey       SecurityKeyOptions
	Fulcio            FulcioOptions
	Rekor             RekorOptions
	OIDC              OIDCOptions
	Registry          RegistryOptions
	BundlePath        string
	SkipConfirmation  bool
}

type SignOptions struct {
	Key               string
	Cert              string
	CertChain         string
	Upload            bool
	Output            string // deprecated: TODO remove when the output flag is fully deprecated
	OutputSignature   string // TODO: this should be the root output file arg.
	OutputCertificate string
	PayloadPath       string
	Force             bool
	Recursive         bool
	Attachment        string
	SkipConfirmation  bool
	NoTlogUpload      bool

	Rekor       RekorOptions
	Fulcio      FulcioOptions
	OIDC        OIDCOptions
	SecurityKey SecurityKeyOptions
	AnnotationOptions
	Registry RegistryOptions
}

type SignatureDigestOptions struct {
	AlgorithmName string
}

type TreeOptions struct {
	Registry  RegistryOptions
	CleanType string
}

type TriangulateOptions struct {
	Type     string
	Registry RegistryOptions
}

type UploadBlobOptions struct {
	ContentType string
	Files       FilesOptions
	Registry    RegistryOptions
	Annotations map[string]string
}

type UploadWASMOptions struct {
	File     string
	Registry RegistryOptions
}

type VerifyAttestationOptions struct {
	Key         string
	CheckClaims bool
	Output      string

	SecurityKey SecurityKeyOptions
	Rekor       RekorOptions
	CertVerify  CertVerifyOptions
	Registry    RegistryOptions
	Predicate   PredicateRemoteOptions
	Policies    []string
	LocalImage  bool
}

type VerifyBlobAttestationOptions struct {
	Key           string
	SignaturePath string
	PredicateOptions
}

type VerifyBlobOptions struct {
	Key        string
	Signature  string
	BundlePath string

	SecurityKey SecurityKeyOptions
	CertVerify  CertVerifyOptions
	Rekor       RekorOptions
	Registry    RegistryOptions
}

type VerifyDockerfileOptions struct {
	VerifyOptions
	BaseImageOnly bool
}

type VerifyOptions struct {
	Key          string
	CheckClaims  bool
	Attachment   string
	Output       string
	SignatureRef string
	LocalImage   bool

	SecurityKey     SecurityKeyOptions
	CertVerify      CertVerifyOptions
	Rekor           RekorOptions
	Registry        RegistryOptions
	SignatureDigest SignatureDigestOptions
	AnnotationOptions
}