docker/attest

Go to file

James Carnegie efb73f4cae Use DSSE artifactType in referrers (#95 )

* bug: Use DSSE media types for artifactType

* Don't serialize DSSE extension if not present

* Update pkg/attestation/types.go

Co-authored-by: Joel Kamp <joel.kamp@docker.com>

* Don't error on no referrers

---------

Co-authored-by: Joel Kamp <joel.kamp@docker.com>

2024-07-22 18:17:12 +01:00

Enable GCP integration test (#82 )

2024-07-09 15:02:49 +01:00

Make referrers attestations OCI compliant (#80 )

2024-07-16 10:05:17 +01:00

Use DSSE artifactType in referrers (#95 )

2024-07-22 18:17:12 +01:00

feat: add attest sign/verify

2024-04-29 16:17:58 -05:00

Add proper mirror support (#74 )

2024-07-12 17:09:41 +01:00

.gitignore

Initial commit

2024-04-15 11:57:10 -05:00

codecov.yml

Unify functions for use in sign & verify --vsa (#71 )

2024-07-05 09:29:14 +01:00

go.mod

Use DSSE artifactType in referrers (#95 )

2024-07-22 18:17:12 +01:00

go.sum

Use DSSE artifactType in referrers (#95 )

2024-07-22 18:17:12 +01:00

LICENSE

Initial commit

2024-04-15 11:57:10 -05:00

README.md

Generate coverage when tests are run (#64 )

2024-06-24 14:26:07 +01:00

README.md

attest

library to create, verify, and evaluate policy for attestations on container images

usage

signing and verifying attestations

See example_sign_test.go

See example_verify_test.go

mirroring TUF repositories to OCI

See example_mirror_test.go

using `go-tuf` OCI registry client

See example_registry_test.go