Affected by GO-2022-0758 and 4 other vulnerabilities

GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

GO-2026-4309: Cosign verification accepts any valid Rekor entry under certain conditions in github.com/sigstore/cosign

The highest tagged major version is v3.

verify

package

v1.7.2 Latest Latest Go to latest Published: Apr 12, 2022 License: Apache-2.0 Imports: 43 Imported by: 12

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/sigstore/cosign

Links

Open Source Insights

Documentation ¶

Index ¶

func PrintVerification(imgRef string, verified []oci.Signature, output string)
func PrintVerificationHeader(imgRef string, co *cosign.CheckOpts, bundleVerified, fulcioVerified bool)
func VerifyBlobCmd(ctx context.Context, ko sign.KeyOpts, ...) error
type VerifyAttestationCommand
- func (c *VerifyAttestationCommand) Exec(ctx context.Context, images []string) (err error)
type VerifyCommand
- func (c *VerifyCommand) Exec(ctx context.Context, images []string) (err error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func PrintVerification ¶

func PrintVerification(imgRef string, verified []oci.Signature, output string)

PrintVerification logs details about the verification to stdout

func PrintVerificationHeader ¶

func PrintVerificationHeader(imgRef string, co *cosign.CheckOpts, bundleVerified, fulcioVerified bool)

func VerifyBlobCmd ¶

func VerifyBlobCmd(ctx context.Context, ko sign.KeyOpts, certRef, certEmail, certOidcIssuer, certChain, sigRef, blobRef string) error

nolint

Types ¶

type VerifyAttestationCommand ¶

type VerifyAttestationCommand struct {
	options.RegistryOptions
	CheckClaims    bool
	CertRef        string
	CertEmail      string
	CertOidcIssuer string
	CertChain      string
	KeyRef         string
	Sk             bool
	Slot           string
	Output         string
	RekorURL       string
	PredicateType  string
	Policies       []string
	LocalImage     bool
}

VerifyAttestationCommand verifies a signature on a supplied container image nolint

func (*VerifyAttestationCommand) Exec ¶

func (c *VerifyAttestationCommand) Exec(ctx context.Context, images []string) (err error)

Exec runs the verification command

type VerifyCommand ¶

type VerifyCommand struct {
	options.RegistryOptions
	CheckClaims    bool
	KeyRef         string
	CertRef        string
	CertEmail      string
	CertOidcIssuer string
	CertChain      string
	Sk             bool
	Slot           string
	Output         string
	RekorURL       string
	Attachment     string
	Annotations    sigs.AnnotationsMap
	SignatureRef   string
	HashAlgorithm  crypto.Hash
	LocalImage     bool
}

VerifyCommand verifies a signature on a supplied container image nolint

func (*VerifyCommand) Exec ¶

func (c *VerifyCommand) Exec(ctx context.Context, images []string) (err error)

Exec runs the verification command

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL