sigstore: opt to verify attestation manifest for specific platform

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
This commit is contained in:
CrazyMax
2026-01-14 12:23:11 +01:00
parent c9ffda6adf
commit a5dc8e7614
3 changed files with 19 additions and 2 deletions

View File

@@ -17,6 +17,7 @@
import type {SerializedBundle} from '@sigstore/bundle';
import {Subject} from '../intoto/intoto';
import {Platform} from '../oci/descriptor';
export const FULCIO_URL = 'https://fulcio.sigstore.dev';
export const REKOR_URL = 'https://rekor.sigstore.dev';
@@ -47,6 +48,7 @@ export interface SignAttestationManifestsResult extends ParsedBundle {
export interface VerifySignedManifestsOpts {
certificateIdentityRegexp: string;
platform?: Platform;
noTransparencyLog?: boolean;
retryOnManifestUnknown?: boolean;
}