cosignhelper

type CosignVerifyOptions struct {
	// PublicKeyPath is the path to custom public key to be used to verify the signature
	// of the OCI image. If the path is empty, the CLI embedded public key would be used
	PublicKeyPath string
	// RegistryOpts registry options used while interacting with registry
	RegistryOpts *RegistryOptions
}

type Cosignhelper interface {
	// Verify verifies the signature on the images using cosign library
	Verify(ctx context.Context, images []string) error
}

type RegistryOptions struct {
	// CACertPaths is the path to CA certs for the registry endpoint.
	// This would be required if the registry is self-signed
	CACertPaths []string
	// SkipCertVerify is to allow insecure connections to registries (e.g., with expired or self-signed TLS certificates)
	SkipCertVerify bool
	// AllowInsecure is to allow using HTTP instead of HTTPS protocol while connecting to registries
	AllowInsecure bool
}