attestation

package

v0.0.0-...-cd41289 Latest Latest Go to latest Published: Dec 20, 2024 License: Apache-2.0 Imports: 11 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

Documentation ¶

Overview ¶

Package attestation helps create SLSA provenance attestations in-toto format, simulating what Tekton Chains would perform.

Index ¶

Constants
func CreateStatementFor(imageName string, image v1.Image) (*in_toto.ProvenanceStatementSLSA02, error)
func SignStatement(ctx context.Context, keyName string, ...) ([]byte, error)

Constants ¶

View Source

const (
	PredicateBuilderID   = "https://tekton.dev/chains/v2"
	PredicateBuilderType = "https://tekton.dev/attestations/chains/pipelinerun@v2"
	PredicateType        = "slsaprovenance"
)

Variables ¶

This section is empty.

Functions ¶

func CreateStatementFor ¶

func CreateStatementFor(imageName string, image v1.Image) (*in_toto.ProvenanceStatementSLSA02, error)

CreateStatementFor creates an empty statement that can be further customized to add and subsequently signed by SignStatement.

func SignStatement ¶

func SignStatement(ctx context.Context, keyName string, statement in_toto.ProvenanceStatementSLSA02) ([]byte, error)

SignStatement signs the provided statement with the named key. The key needs to be previously generated with the functionality from the crypto package.

Types ¶

This section is empty.

Source Files ¶

View all Source files

attestation.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL