attest

library to create, verify, and evaluate policy for attestations on container images

usage

verifying attestations

See example example_verify.go

signing attestations

See example example_sign.go

mirroring TUF repositories to OCI

See example example_mirror.go

using go-tuf OCI registry client

See example example_registry