2024-04-15 11:57:10 -05:00
|
|
|
# attest
|
2024-04-30 15:07:37 -05:00
|
|
|
library to create, verify, and evaluate policy for attestations on container images
|
2024-04-29 13:43:50 -05:00
|
|
|
|
|
|
|
|
# usage
|
2024-04-30 16:05:58 -05:00
|
|
|
## verifying attestations
|
2024-05-02 13:42:35 -05:00
|
|
|
See [example_verify_test.go](./pkg/attest/example_verify_test.go)
|
2024-04-30 16:05:58 -05:00
|
|
|
|
2024-04-29 13:43:50 -05:00
|
|
|
## signing attestations
|
2024-05-02 13:42:35 -05:00
|
|
|
See [example_sign_test.go](./pkg/attest/example_sign_test.go)
|
2024-04-30 15:07:37 -05:00
|
|
|
|
2024-05-02 13:35:57 -05:00
|
|
|
## mirroring TUF repositories to OCI
|
2024-05-02 13:42:35 -05:00
|
|
|
See [example_mirror_test.go](./pkg/mirror/example_mirror_test.go)
|
2024-04-29 13:43:50 -05:00
|
|
|
|
|
|
|
|
### using `go-tuf` OCI registry client
|
2024-05-02 13:42:35 -05:00
|
|
|
See [example_registry_test.go](./pkg/tuf/example_registry_test.go)
|
