attest

Files

James Carnegie 05caa959c4 Use a Factory to create signature verifiers at policy evaluation time (#165 )

* Make verifiers composable

* fix: remove unused code and improve signature verification logic

* fix: simplify abstractions and renamed some things

* fix: improve tl interface.

* fix: sort out signer/verifier

2024-09-18 13:34:10 +01:00

attestation_test.go

refactor! remove pkg directory (#145 )

2024-09-02 16:17:50 +01:00

attestation.go

refactor! remove pkg directory (#145 )

2024-09-02 16:17:50 +01:00

example_attestation_manifest_test.go

Use a Factory to create signature verifiers at policy evaluation time (#165 )

2024-09-18 13:34:10 +01:00

layout_test.go

feature!: support for setting HTTP User-Agent header (#157 )

2024-09-09 14:22:17 +01:00

layout.go

refactor! remove pkg directory (#145 )

2024-09-02 16:17:50 +01:00

mock.go

Verify input image/platform against attestation subjects before passing to rego (#148 )

2024-09-04 10:20:00 +01:00

README.md

refactor! remove pkg directory (#145 )

2024-09-02 16:17:50 +01:00

referrers_test.go

Use a Factory to create signature verifiers at policy evaluation time (#165 )

2024-09-18 13:34:10 +01:00

referrers.go

Verify input image/platform against attestation subjects before passing to rego (#148 )

2024-09-04 10:20:00 +01:00

registry_test.go

feature!: support for setting HTTP User-Agent header (#157 )

2024-09-09 14:22:17 +01:00

registry.go

Verify input image/platform against attestation subjects before passing to rego (#148 )

2024-09-04 10:20:00 +01:00

resolver.go

refactor! remove pkg directory (#145 )

2024-09-02 16:17:50 +01:00

sign_test.go

Use a Factory to create signature verifiers at policy evaluation time (#165 )

2024-09-18 13:34:10 +01:00

sign.go

Use a Factory to create signature verifiers at policy evaluation time (#165 )

2024-09-18 13:34:10 +01:00

types_test.go

feat: add slsa v1 predicate type

2024-09-04 16:15:56 -05:00

types.go

Use a Factory to create signature verifiers at policy evaluation time (#165 )

2024-09-18 13:34:10 +01:00

verifier_test.go

Use a Factory to create signature verifiers at policy evaluation time (#165 )

2024-09-18 13:34:10 +01:00

verifier.go

Use a Factory to create signature verifiers at policy evaluation time (#165 )

2024-09-18 13:34:10 +01:00

verify_test.go

Use a Factory to create signature verifiers at policy evaluation time (#165 )

2024-09-18 13:34:10 +01:00

verify.go

Use a Factory to create signature verifiers at policy evaluation time (#165 )

2024-09-18 13:34:10 +01:00

vsa.go

refactor! remove pkg directory (#145 )

2024-09-02 16:17:50 +01:00

README.md

attestations

This package is for components that deal with the creation, storage, and retrieval of signed attestions using OCI.

For more generic OCI components see the oci package.