Affected by GO-2022-0758 and 4 other vulnerabilities

GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

GO-2026-4309: Cosign verification accepts any valid Rekor entry under certain conditions in github.com/sigstore/cosign

The highest tagged major version is v3.

verify

package

v1.5.2 Latest Latest Go to latest Published: Feb 18, 2022 License: Apache-2.0 Imports: 41 Imported by: 12

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/sigstore/cosign

Links

Open Source Insights

Documentation ¶

Index ¶

func PrintVerification(imgRef string, verified []oci.Signature, output string)
func PrintVerificationHeader(imgRef string, co *cosign.CheckOpts, bundleVerified, fulcioVerified bool)
func VerifyBlobCmd(ctx context.Context, ko sign.KeyOpts, ...) error
type VerifyAttestationCommand
- func (c *VerifyAttestationCommand) Exec(ctx context.Context, images []string) (err error)
type VerifyCommand
- func (c *VerifyCommand) Exec(ctx context.Context, images []string) (err error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func PrintVerification ¶

func PrintVerification(imgRef string, verified []oci.Signature, output string)

PrintVerification logs details about the verification to stdout

func PrintVerificationHeader ¶

func PrintVerificationHeader(imgRef string, co *cosign.CheckOpts, bundleVerified, fulcioVerified bool)

func VerifyBlobCmd ¶

func VerifyBlobCmd(ctx context.Context, ko sign.KeyOpts, certRef, certEmail, certOidcIssuer, sigRef, blobRef string) error

nolint

Types ¶

type VerifyAttestationCommand ¶

type VerifyAttestationCommand struct {
	options.RegistryOptions
	CheckClaims    bool
	CertRef        string
	CertEmail      string
	CertOidcIssuer string
	KeyRef         string
	Sk             bool
	Slot           string
	Output         string
	RekorURL       string
	PredicateType  string
	Policies       []string
	LocalImage     bool
}

VerifyAttestationCommand verifies a signature on a supplied container image nolint

func (*VerifyAttestationCommand) Exec ¶

func (c *VerifyAttestationCommand) Exec(ctx context.Context, images []string) (err error)

Exec runs the verification command

type VerifyCommand ¶

type VerifyCommand struct {
	options.RegistryOptions
	CheckClaims    bool
	KeyRef         string
	CertRef        string
	CertEmail      string
	CertOidcIssuer string
	Sk             bool
	Slot           string
	Output         string
	RekorURL       string
	Attachment     string
	Annotations    sigs.AnnotationsMap
	SignatureRef   string
	HashAlgorithm  crypto.Hash
	LocalImage     bool
}

VerifyCommand verifies a signature on a supplied container image nolint

func (*VerifyCommand) Exec ¶

func (c *VerifyCommand) Exec(ctx context.Context, images []string) (err error)

Exec runs the verification command

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL