mrjoelkamp
c7d17faf05
fix: layout attestation resolver
2024-08-05 15:32:24 -05:00
mrjoelkamp
c690d1090c
chore: use prefix const
2024-08-05 11:22:49 -05:00
mrjoelkamp
5d096e226f
refactor: fix import cycle for mock resolver
2024-08-05 10:19:50 -05:00
James Carnegie
9582e69968
fix: standardize casing of initialisms ( #112 )
...
* fix: standardize casing of initialisms
* fix: rename intoto -> inToto and Intoto to InToto
* fix: fix all linting errors
2024-08-01 15:35:15 +01:00
Jonny Stoten
008c14e3f3
chore: reformat with gofumpt ( #109 )
...
* Reformat with gofumpt
* Suppress issue about laxer perms than 0600
---------
Co-authored-by: Joel Kamp <joel.kamp@docker.com >
2024-07-31 15:48:00 +01:00
mrjoelkamp
1e3c120272
fix: test targets file no ext
2024-07-22 16:03:23 -05:00
James Carnegie
065b354d3c
Make referrers attestations OCI compliant ( #80 )
...
* Single attestation when creating VSA
* Create single layer images for referrers attestations
* Move mock to test package. Add artifacts test
* Add test for envelope detection
* Add tests for image/index saving
* Add mirror tests
* Remove AttestationImage field from AttestationManifest
* Update naming. strictReferers != laxReferrers
* Add specific test for SaveReferrers
2024-07-16 10:05:17 +01:00
mrjoelkamp
d65be7be7c
fix: use prod as default for mirroring
2024-07-11 09:41:04 -05:00
mrjoelkamp
0330ea4755
feat: add EmbeddedRoot type
2024-07-10 17:30:35 -05:00
James Carnegie
0038e3d23d
Unify functions for use in sign & verify --vsa ( #71 )
...
* Use receivers for manifest functions
* Move SaveImage/SaveIndex from image-signing-verifier
* Ignore test fixtures in coverage
* Add AddImagesToIndex function
2024-07-05 09:29:14 +01:00
James Carnegie
bda1910107
Add e2e auth test ( #68 )
...
* Add e2e auth test
2024-07-01 14:14:23 +01:00
Joel Kamp
8cae188735
Merge branch 'main' into feat-cloud-provider-authn
2024-06-21 16:39:45 -05:00
James Carnegie
6bd57e02b6
Add support for separate attestation storage repo ( #62 )
...
* Add support for separate attestation storage repo
* Move mapping file types and parsing to config package
* Change signature of Verify to take image/platform
* Separate Attestation Resolvers to their own files (registry, layout and referrers)
* Add support configuring referrers resolution style in mapping.yaml
* Add registry test
2024-06-21 11:29:16 +01:00
mrjoelkamp
08e823e05b
refactor: make common authn function
2024-06-18 12:00:47 -05:00
mrjoelkamp
f611f81fff
feat: add support for ecr, gcp, acr authn
2024-06-18 09:59:04 -05:00
mrjoelkamp
8e3c6a2ec5
feat: use os.ModePerm
2024-06-18 09:39:12 -05:00
mrjoelkamp
c02e628600
fix: mkdir perms
2024-06-14 15:23:25 -05:00
mrjoelkamp
83dfd746b9
fix: update output dir permissions
2024-06-14 11:11:48 -05:00
mrjoelkamp
845fe93c11
refactor: remove any; split into functions
2024-06-14 10:04:18 -05:00
mrjoelkamp
c154613c52
refactor: use interface value
2024-06-14 10:03:39 -05:00
James Carnegie
e44390d2bc
Don't use pointers for image interfaces ( #51 )
...
* Don't use pointers for image interfaces
* Also for oci layout
* Remove default case
2024-06-14 10:28:14 +01:00
Jonny Stoten
6397dcede8
Check version of attest against constraints in TUF ( #19 )
...
* Check version of attest against constraints in TUF
* Add link to semver lib constraints docs
2024-05-22 17:02:25 +01:00
Jonny Stoten
bd849d9b43
Simplify some string concats
2024-05-08 13:09:25 +01:00
Jonny Stoten
8d45522fe8
Use assert.NoError for nil checks on errors
2024-05-08 13:09:25 +01:00
Joel Kamp
c99f90cbbf
docs: update examples in README.md
2024-05-02 13:49:14 -05:00
mrjoelkamp
3701942bf1
docs: update examples in README.md
2024-05-02 13:35:57 -05:00
mrjoelkamp
6b8c5b56bc
fix: default to v1.ImageIndex for *mutate.index support
2024-04-30 15:46:55 -05:00
mrjoelkamp
a3422b5331
feat: add policy, oci, attestation
2024-04-22 12:38:56 -05:00
mrjoelkamp
c1035c951e
feat: combine tuf code
2024-04-15 15:37:31 -05:00
