Affected by GO-2024-2718 and 2 other vulnerabilities

GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

GO-2026-4309: Cosign verification accepts any valid Rekor entry under certain conditions in github.com/sigstore/cosign

The highest tagged major version is v3.

providers

package

v1.7.2 Latest Latest Go to latest Published: Apr 12, 2022 License: Apache-2.0 Imports: 4 Imported by: 15

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/sigstore/cosign

Links

Open Source Insights

Documentation ¶

Overview ¶

Package providers defines the APIs for providers to detect their relevance and register themselves to furnish OIDC tokens within a given environment.

Index ¶

func Enabled(ctx context.Context) bool
func Provide(ctx context.Context, audience string) (string, error)
func Register(name string, p Interface)
type Interface

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func Enabled ¶

func Enabled(ctx context.Context) bool

Enabled checks whether any of the registered providers are enabled in this execution context.

func Provide ¶

func Provide(ctx context.Context, audience string) (string, error)

Provide fetches an OIDC token from one of the active providers.

func Register ¶

func Register(name string, p Interface)

Register is used by providers to participate in furnishing OIDC tokens.

Types ¶

type Interface ¶

type Interface interface {
	// Enabled returns true if the provider is enabled.
	Enabled(ctx context.Context) bool

	// Provide returns an OIDC token scoped to the provided audience.
	Provide(ctx context.Context, audience string) (string, error)
}

Interface is what providers need to implement to participate in furnishing OIDC tokens.

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
all
filesystem Package filesystem defines an implementation of the providers.Interface that reads identity tokens from a well-known filesystem location.	Package filesystem defines an implementation of the providers.Interface that reads identity tokens from a well-known filesystem location.
github Package github defines a github implementation of the providers.Interface.	Package github defines a github implementation of the providers.Interface.
google Package google defines a google implementation of the providers.Interface.	Package google defines a google implementation of the providers.Interface.
spiffe Package spiffe defines a SPIFFE/SPIRE implementation of the providers.Interface.	Package spiffe defines a SPIFFE/SPIRE implementation of the providers.Interface.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL