trustedresources

package

v0.45.2 Latest Latest Go to latest Published: Aug 23, 2026 License: Apache-2.0 Imports: 18 Imported by: 0

Details

View Source

const (
	// SignatureAnnotation is the key of signature in annotation map
	SignatureAnnotation = "tekton.dev/signature"
)

This section is empty.

func Sign(o metav1.Object, keyfile, kmsKey, targetFile string) error

Sign the crd and output signed bytes to writer

func UnmarshalCRD(buf []byte, kind string) (metav1.Object, []byte, error)

UnmarshalCRD will get the task/pipeline from buffer and extract the signature.

func Verify(o metav1.Object, keyfile, kmsKey string) error

Verify the crd

func VerifyInterface(
	obj interface{},
	verifier signature.Verifier,
	signature []byte,
) error

VerifyInterface get the checksum of json marshalled object and verify it.

This section is empty.