docker/attest

Go to file

Jonny Stoten a4c3bd07fe Add proper mirror support (#74 )

* Add rewrite support and fix existing tests

* Add unit tests for policy matching

* Compile regexes up front and store policies in map

* Add test for verify flow with mirror

* Rename ImageName -> ResolvedName

And only set it when necessary

* Rename Rewrite -> Replacement

but keep it as rewrite in the yaml

2024-07-12 17:09:41 +01:00

Enable GCP integration test (#82 )

2024-07-09 15:02:49 +01:00

feat: add EmbeddedRoot type

2024-07-10 17:30:35 -05:00

Add proper mirror support (#74 )

2024-07-12 17:09:41 +01:00

feat: add attest sign/verify

2024-04-29 16:17:58 -05:00

Add proper mirror support (#74 )

2024-07-12 17:09:41 +01:00

.gitignore

Initial commit

2024-04-15 11:57:10 -05:00

codecov.yml

Unify functions for use in sign & verify --vsa (#71 )

2024-07-05 09:29:14 +01:00

go.mod

feat(deps): bump github.com/aws/aws-sdk-go-v2/config (#86 )

2024-07-12 10:38:33 +01:00

go.sum

feat(deps): bump github.com/aws/aws-sdk-go-v2/config (#86 )

2024-07-12 10:38:33 +01:00

LICENSE

Initial commit

2024-04-15 11:57:10 -05:00

README.md

Generate coverage when tests are run (#64 )

2024-06-24 14:26:07 +01:00

README.md

attest

library to create, verify, and evaluate policy for attestations on container images

usage

signing and verifying attestations

See example_sign_test.go

See example_verify_test.go

mirroring TUF repositories to OCI

See example_mirror_test.go

using `go-tuf` OCI registry client

See example_registry_test.go