docker/attest

Go to file

James Carnegie 4be882aeb0 Handle errors from Go in Rego. Support for skipping TL (#47 )

* Make TL logging/verification optional

* Return errors from go-lang fns

* Update pkg/policy/rego.go

Co-authored-by: Jonny Stoten <jonny@jonnystoten.com>

* Update pkg/attestation/sign.go

Co-authored-by: Joel Kamp <joel.kamp@docker.com>

* Move public key marshelling until later

* Simplify logSignature and pass down opts

---------

Co-authored-by: Jonny Stoten <jonny@jonnystoten.com>
Co-authored-by: Joel Kamp <joel.kamp@docker.com>

2024-06-06 09:59:32 +01:00

Merge branch 'main' into feat-add-CODEOWNERS

2024-04-16 10:20:28 -05:00

Return VSA and rich errors from verification (#38 )

2024-05-22 14:49:23 +01:00

Handle errors from Go in Rego. Support for skipping TL (#47 )

2024-06-06 09:59:32 +01:00

feat: add attest sign/verify

2024-04-29 16:17:58 -05:00

Handle errors from Go in Rego. Support for skipping TL (#47 )

2024-06-06 09:59:32 +01:00

.gitignore

Initial commit

2024-04-15 11:57:10 -05:00

go.mod

feat(deps): bump github.com/aws/aws-sdk-go-v2/config (#46 )

2024-06-04 15:53:00 +01:00

go.sum

feat(deps): bump github.com/aws/aws-sdk-go-v2/config (#46 )

2024-06-04 15:53:00 +01:00

LICENSE

Initial commit

2024-04-15 11:57:10 -05:00

README.md

docs: pr comments

2024-05-02 16:07:04 -05:00

README.md

attest

library to create, verify, and evaluate policy for attestations on container images

usage

signing and verifying attestations

See example_sign_test.go

See example_verify_test.go

mirroring TUF repositories to OCI

See example_mirror_test.go

using `go-tuf` OCI registry client

See example_registry_test.go