Documentation
¶
Overview ¶
Copyright (c) Edgeless Systems GmbH
SPDX-License-Identifier: AGPL-3.0-only
Package sigstore is used to verify Constellation components using sigstore, cosign and rekor.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func SignContent ¶
SignContent signs the content with the cosign encrypted private key and corresponding cosign password.
Types ¶
type CosignVerifier ¶
type CosignVerifier struct {
// contains filtered or unexported fields
}
CosignVerifier wraps a public key that can be used for verifying signatures.
func (CosignVerifier) VerifySignature ¶
func (c CosignVerifier) VerifySignature(content, signature []byte) error
VerifySignature checks if the signature of content can be verified using publicKey. signature is expected to be base64 encoded. publicKey is expected to be PEM encoded.
type Rekor ¶
type Rekor struct {
// contains filtered or unexported fields
}
Rekor allows to interact with the transparency log at: https://rekor.sigstore.dev For more information see Rekor's Swagger definition: https://www.sigstore.dev/swagger/#/
func NewRekor ¶
NewRekor creates a new instance of Rekor to interact with the transparency log at: https://rekor.sigstore.dev
func (*Rekor) SearchByHash ¶
SearchByHash searches for the hash of an artifact in Rekor transparency log. A list of UUIDs will be returned, since multiple entries could be present for a single artifact in Rekor.
type Verifier ¶
Verifier checks if the signature of content can be verified.
func NewCosignVerifier ¶
NewCosignVerifier unmarshalls and validates the given pem encoded public key and returns a new CosignVerifier.
Source Files
Directories