Affected by GO-2024-2718 and 2 other vulnerabilities

GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

GO-2026-4309: Cosign verification accepts any valid Rekor entry under certain conditions in github.com/sigstore/cosign

The highest tagged major version is v3.

remote

package

v1.2.1 Latest Latest Go to latest Published: Sep 20, 2021 License: Apache-2.0 Imports: 23 Imported by: 8

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/sigstore/cosign

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func DefaultMediaTypeGetter(b []byte) types.MediaType
func Descriptors(ref name.Reference, remoteOpts ...remote.Option) ([]v1.Descriptor, error)
func SignatureImage(ref name.Reference, opts ...remote.Option) (oci.Signatures, error)
func UploadFile(b []byte, ref name.Reference, layerMt, configMt types.MediaType, ...) (v1.Image, error)
func UploadSignature(signature, payload []byte, dst name.Reference, opts UploadOpts) (uploadedSig []byte, err error)
type Digester
- func UploadFiles(ref name.Reference, files []File, getMt MediaTypeGetter, ...) (Digester, error)
type File
- func FileFromFlag(s string) File
type MediaTypeGetter
type UploadOpts

Constants ¶

View Source

const (
	BundleKey = "dev.sigstore.cosign/bundle"
)

Variables ¶

This section is empty.

Functions ¶

func DefaultMediaTypeGetter ¶ added in v0.6.0

func DefaultMediaTypeGetter(b []byte) types.MediaType

func Descriptors ¶

func Descriptors(ref name.Reference, remoteOpts ...remote.Option) ([]v1.Descriptor, error)

func SignatureImage ¶

func SignatureImage(ref name.Reference, opts ...remote.Option) (oci.Signatures, error)

SignatureImage returns the existing destination image, or a new, empty one.

func UploadFile ¶

func UploadFile(b []byte, ref name.Reference, layerMt, configMt types.MediaType, remoteOpts ...remote.Option) (v1.Image, error)

func UploadSignature ¶

func UploadSignature(signature, payload []byte, dst name.Reference, opts UploadOpts) (uploadedSig []byte, err error)

Types ¶

type Digester ¶

type Digester interface {
	Digest() (v1.Hash, error)
}

func UploadFiles ¶

func UploadFiles(ref name.Reference, files []File, getMt MediaTypeGetter, remoteOpts ...remote.Option) (Digester, error)

type File ¶

type File interface {
	Contents() ([]byte, error)
	Platform() *v1.Platform
	String() string
	Path() string
}

func FileFromFlag ¶ added in v1.1.0

func FileFromFlag(s string) File

type MediaTypeGetter ¶ added in v0.6.0

type MediaTypeGetter func(b []byte) types.MediaType

type UploadOpts ¶

type UploadOpts struct {
	Cert                  []byte
	Chain                 []byte
	DupeDetector          signature.Verifier
	Bundle                *oci.Bundle
	AdditionalAnnotations map[string]string
	RemoteOpts            []remote.Option
	MediaType             string
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL