docker/attest
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Make referrers attestations OCI compliant (#80)

Browse Source 
* Single attestation when creating VSA

* Create single layer images for referrers attestations

* Move mock to test package. Add artifacts test

* Add test for envelope detection

* Add tests for image/index saving

* Add mirror tests

* Remove AttestationImage field from AttestationManifest

* Update naming. strictReferers != laxReferrers

* Add specific test for SaveReferrers
This commit is contained in:
James Carnegie
2024-07-16 10:05:17 +01:00
committed by GitHub
parent a4c3bd07fe
commit 065b354d3c
24 changed files with 809 additions and 340 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
go.mod
View File

@@ -31,6 +31,9 @@ require (
sigs.k8s.io/yaml v1.4.0
)
// fork of a fork (in case it goes away) with changes to support ArtifactType (https://github.com/google/go-containerregistry/pull/1931)
replace github.com/google/go-containerregistry v0.20.0 => github.com/kipz/go-containerregistry v0.0.0-20240423201245-bf57eace21f2
require (
cloud.google.com/go v0.115.0 // indirect
cloud.google.com/go/auth v0.7.0 // indirect