Add support for separate attestation storage repo (#62)

* Add support for separate attestation storage repo * Move mapping file types and parsing to config package * Change signature of Verify to take image/platform * Separate Attestation Resolvers to their own files (registry, layout and referrers) * Add support configuring referrers resolution style in mapping.yaml * Add registry test
2024-06-21 11:29:16 +01:00
parent 86878482c3
commit 6bd57e02b6
20 changed files with 877 additions and 619 deletions
--- a/pkg/policy/testdata/mock-tuf-allow/mapping.yaml
+++ b/pkg/policy/testdata/mock-tuf-allow/mapping.yaml
@@ -7,6 +7,8 @@ policies:
      prefix: library/
    id: docker-official-images
    description: Docker Official Images
+    attestations:
+      repo: "localhost:5001/library-refs"
    files:
      - path: doi/policy.rego
 mirrors: