docker/attest
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: push attestation artifacts by digest

Browse Source
This commit is contained in:
mrjoelkamp
2024-08-07 15:12:50 -05:00
parent 8767951fa2
commit 9aa56e564d
3 changed files with 43 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
pkg/mirror/mirror.go
View File

@@ -134,21 +134,30 @@ func SaveReferrers(manifest *attestation.Manifest, outputs []*oci.ImageSpec) err
continue
}
// so that we use the same tag each time to reduce number of tags (tags aren't needed for referrers but we must push one)
attOut, err := oci.ReplaceTagInSpec(output, manifest.SubjectDescriptor.Digest)
if err != nil {
return err
}
// otherwise we end up with the detected platform, though I'm not sure it matters
attOut.Platform = &v1.Platform{
OS: "unknown",
Architecture: "unknown",
}
// attOut, err := oci.ReplaceTagInSpec(output, manifest.SubjectDescriptor.Digest)
// if err != nil {
// return err
// }
images, err := manifest.BuildReferringArtifacts()
if err != nil {
return fmt.Errorf("failed to build image: %w", err)
}
for _, image := range images {
err := PushImageToRegistry(image, attOut.Identifier)
layers, err := image.Layers()
if err != nil {
return fmt.Errorf("failed to get attestation image layers: %w", err)
}
digest, err := layers[0].Digest()
if err != nil {
return fmt.Errorf("failed to get attestation image digest: %w", err)
}
digest2, _ := image.Digest()
fmt.Printf("digest: %s, digest2: %s\n", digest, digest2)
attOut, err := oci.ReplaceDigestInSpec(output, digest2)
if err != nil {
return fmt.Errorf("failed to create attestation image spec: %w", err)
}
err = PushImageToRegistry(image, attOut.Identifier)
if err != nil {
return fmt.Errorf("failed to push image: %w", err)
}