Jonny Stoten
|
4ca962b70c
|
Add function for parsing DOI definition files (#172)
Add a Rego builtin called `attest.internals.parse_library_definition`
for parsing the DOI definition files in
https://github.com/docker-library/official-images/tree/master/library.
This will allow us to verify DOI provenance fields against these files
which are the source of truth for DOI images.
This function just defers to
https://github.com/docker-library/bashbrew/blob/master/manifest/rfc2822.go.
|
2024-09-27 12:32:24 +01:00 |
|
James Carnegie
|
3e82338649
|
refactor: remove explicit closures. expose rego fns (#170)
|
2024-09-19 11:04:00 +01:00 |
|
James Carnegie
|
05caa959c4
|
Use a Factory to create signature verifiers at policy evaluation time (#165)
* Make verifiers composable
* fix: remove unused code and improve signature verification logic
* fix: simplify abstractions and renamed some things
* fix: improve tl interface.
* fix: sort out signer/verifier
|
2024-09-18 13:34:10 +01:00 |
|
James Carnegie
|
48e58a9115
|
Verify input image/platform against attestation subjects before passing to rego (#148)
* feat: verify subjects before passing to rego
|
2024-09-04 10:20:00 +01:00 |
|
James Carnegie
|
8982778507
|
refactor! remove pkg directory (#145)
* refactor!: remove pkg directory
* chore: include breaking changes in draft
|
2024-09-02 16:17:50 +01:00 |
|