verifysignature

Mar 14, 2024

Changes in this version

+ func IsNoMatchingSignatures(err error) bool

+ func IsNoSignaturesFound(err error) bool

+ func NewCacheVerifier(cache SignatureVerificationResultCache, verifier Verifier) *cacheVerifier

+ func NewDirectVerifier(keys []crypto.PublicKey) *directVerifier

+ func NewSignatureVerificationResultCache(refreshInterval, cachedObjectTTL time.Duration) (*signatureVerificationResultCache, error)

+ type HandleBuilder struct

+ func NewHandleBuilder() HandleBuilder

+ func (hb HandleBuilder) Build() (*handler, error)

+ func (hb HandleBuilder) WithAllowUntrustedImages(allowUntrustedImages bool) HandleBuilder

+ func (hb HandleBuilder) WithCacheRefreshInterval(refreshInterval time.Duration) HandleBuilder

+ func (hb HandleBuilder) WithCacheTTL(ttl time.Duration) HandleBuilder

+ func (hb HandleBuilder) WithCosignPublicKeysReader(cosignPublicKeysReader io.Reader) HandleBuilder

+ func (hb HandleBuilder) WithLogger(logger logr.Logger) HandleBuilder

+ func (hb HandleBuilder) WithManager(mgr manager.Manager) HandleBuilder

+ func (hb HandleBuilder) WithUseOnlyImagePullSecrets(useOnlyImagePullSecrets bool) HandleBuilder

+ type SignatureVerificationResultCache interface

+ GetSignatureVerificationResult func(string) (bool, bool)

+ StoreSignatureVerificationResult func(string, bool)

+ type Verifier interface

+ Verify func(context.Context, string, utils.KeyChainReader) (bool, error)