Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

WIP: Add Support for verifying attestations #7

Closed
wants to merge 10 commits into from
Closed

WIP: Add Support for verifying attestations #7

wants to merge 10 commits into from

Commits on Jan 11, 2022

  1. Support verification with public keys

    @ribbybibby
    ribbybibby committed Jan 11, 2022
    Configuration menu
    Copy the full SHA
    b84740f View commit details
    Browse the repository at this point in the history

  2. verifyin attestation if requested

    Tom Meadows committed Jan 11, 2022
    Configuration menu
    Copy the full SHA
    4828619 View commit details
    Browse the repository at this point in the history

  3. Support different verification options per image 

    Different images will require different verification options. This
commit adds configuration that allows you to define different
'verifiers' for specific image references, or image reference patterns.

At the moment it supports verification by public key, or the existing
options, but should be expanded to include all supported options.

Also modifies the response from the provider to include an error
per-image checked, rather than returning any error as a 'system' error.

I've also removed the _invalid suffix from the key returned in the
response when there's an error. The presence of the 'error' field
indicates this better, I think.

Signed-off-by: Rob Best <[email protected]>
    @ribbybibby
    ribbybibby committed Jan 11, 2022
    Configuration menu
    Copy the full SHA
    7307a7b View commit details
    Browse the repository at this point in the history

  4. Merge branch 'verifiers' of github.com:ribbybibby/cosign-gatekeeper-p… 

    …rovider into add-attestations
    Tom Meadows committed Jan 11, 2022
    Configuration menu
    Copy the full SHA
    12ba765 View commit details
    Browse the repository at this point in the history

  5. added support for verifying attestations for images

    Tom Meadows committed Jan 11, 2022
    Configuration menu
    Copy the full SHA
    36cd98b View commit details
    Browse the repository at this point in the history

  6. moved attestationPresent

    Tom Meadows committed Jan 11, 2022
    Configuration menu
    Copy the full SHA
    180473f View commit details
    Browse the repository at this point in the history

  7. Update provider.go 

    Co-authored-by: Rob Best <[email protected]>
    @ribbybibby
    Tom Meadows and ribbybibby authored Jan 11, 2022
    Configuration menu
    Copy the full SHA
    e9bb262 View commit details
    Browse the repository at this point in the history

  8. Update provider.go 

    Co-authored-by: Rob Best <[email protected]>
    @ribbybibby
    Tom Meadows and ribbybibby authored Jan 11, 2022
    Configuration menu
    Copy the full SHA
    b6c6f77 View commit details
    Browse the repository at this point in the history

  9. Update provider.go 

    Co-authored-by: Rob Best <[email protected]>
    @ribbybibby
    Tom Meadows and ribbybibby authored Jan 11, 2022
    Configuration menu
    Copy the full SHA
    da535d8 View commit details
    Browse the repository at this point in the history

  10. changed bundleVerified check to only when rekor is used

    Tom Meadows committed Jan 11, 2022
    Configuration menu
    Copy the full SHA
    cc53f46 View commit details
    Browse the repository at this point in the history