attest

library to create, verify, and evaluate policy for attestations on container images

usage

signing and verifying attestations

See example_sign_test.go

See example_verify_test.go

mirroring TUF repositories to OCI

See example_mirror_test.go

using go-tuf OCI registry client

See example_registry_test.go