docker/attest

Go to file

James Carnegie 065b354d3c Make referrers attestations OCI compliant (#80 )

* Single attestation when creating VSA

* Create single layer images for referrers attestations

* Move mock to test package. Add artifacts test

* Add test for envelope detection

* Add tests for image/index saving

* Add mirror tests

* Remove AttestationImage field from AttestationManifest

* Update naming. strictReferers != laxReferrers

* Add specific test for SaveReferrers

2024-07-16 10:05:17 +01:00

Enable GCP integration test (#82 )

2024-07-09 15:02:49 +01:00

Make referrers attestations OCI compliant (#80 )

2024-07-16 10:05:17 +01:00

Make referrers attestations OCI compliant (#80 )

2024-07-16 10:05:17 +01:00

feat: add attest sign/verify

2024-04-29 16:17:58 -05:00

Add proper mirror support (#74 )

2024-07-12 17:09:41 +01:00

.gitignore

Initial commit

2024-04-15 11:57:10 -05:00

codecov.yml

Unify functions for use in sign & verify --vsa (#71 )

2024-07-05 09:29:14 +01:00

go.mod

Make referrers attestations OCI compliant (#80 )

2024-07-16 10:05:17 +01:00

go.sum

Make referrers attestations OCI compliant (#80 )

2024-07-16 10:05:17 +01:00

LICENSE

Initial commit

2024-04-15 11:57:10 -05:00

README.md

Generate coverage when tests are run (#64 )

2024-06-24 14:26:07 +01:00

README.md

attest

library to create, verify, and evaluate policy for attestations on container images

usage

signing and verifying attestations

See example_sign_test.go

See example_verify_test.go

mirroring TUF repositories to OCI

See example_mirror_test.go

using `go-tuf` OCI registry client

See example_registry_test.go