Documentation
¶
Overview ¶
Copyright (c) Edgeless Systems GmbH
SPDX-License-Identifier: AGPL-3.0-only
Package sigstore is used to verify Constellation components using sigstore, cosign and rekor.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func SignContent ¶ added in v2.8.0
SignContent signs the content with the cosign encrypted private key and corresponding cosign password.
Types ¶
type CosignVerifier ¶ added in v2.8.0
type CosignVerifier struct {
// contains filtered or unexported fields
}
CosignVerifier wraps a public key that can be used for verifying signatures.
func (CosignVerifier) VerifySignature ¶ added in v2.8.0
func (c CosignVerifier) VerifySignature(content, signature []byte) error
VerifySignature checks if the signature of content can be verified using publicKey. signature is expected to be base64 encoded. publicKey is expected to be PEM encoded.
type Rekor ¶ added in v2.2.0
type Rekor struct {
// contains filtered or unexported fields
}
Rekor allows to interact with the transparency log at: https://rekor.sigstore.dev For more information see Rekor's Swagger definition: https://www.sigstore.dev/swagger/#/
func NewRekor ¶ added in v2.2.0
NewRekor creates a new instance of Rekor to interact with the transparency log at: https://rekor.sigstore.dev
func (*Rekor) SearchByHash ¶ added in v2.2.0
SearchByHash searches for the hash of an artifact in Rekor transparency log. A list of UUIDs will be returned, since multiple entries could be present for a single artifact in Rekor.
func (*Rekor) VerifyEntry ¶ added in v2.2.0
VerifyEntry performs log entry verification (see verifyLogEntry) and verifies that the provided publicKey was used to sign the entry. An error is returned if any verification fails.
type Verifier ¶ added in v2.9.0
Verifier checks if the signature of content can be verified.
func NewCosignVerifier ¶ added in v2.10.0
NewCosignVerifier unmarshalls and validates the given pem encoded public key and returns a new CosignVerifier.
Source Files
Directories