cosign

package
v4.3.3 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Aug 19, 2025 License: BSD-3-Clause Imports: 22 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

View Source
var ErrNoValidSignatures = errors.New("no valid signatures found")
View Source
var ErrOCIBlobMismatch = errors.New("OCI blob digest mismatch")

Functions

func SignOCISIF

func SignOCISIF(ctx context.Context, sifPath string, signer signature.Signer) error

func VerifyOCISIF

func VerifyOCISIF(ctx context.Context, sifPath string, verifier signature.Verifier) ([]byte, error)

VerifyOCISIF checks that a single OCI container image, contained in the OCI-SIF file at sifPath, has at least 1 cosign signature that can be verified with the provided verifier. The digests of the OCI blobs store in sifPath are also checked vs their actual content. Returns a JSON representation of valid payloads.

Types

This section is empty.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL