constellation/internal/sigstore/BUILD.bazel
Adrian Stobbe b51cc52945
config: sign Azure versions on upload & verify on fetch (#1836)
* add SignContent() + integrate into configAPI

* use static client for upload versions tool; fix staticupload calleeReference bug

* use version to get proper cosign pub key.

* mock fetcher in CLI tests

* only provide config.New constructor with fetcher

Co-authored-by: Otto Bittner <cobittner@posteo.net>
Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>
2023-06-01 13:55:46 +02:00

45 lines
1.4 KiB
Python

load("@io_bazel_rules_go//go:def.bzl", "go_library")
load("//bazel/go:go_test.bzl", "go_test")
go_library(
name = "sigstore",
srcs = [
"rekor.go",
"sign.go",
"sigstore.go",
"verify.go",
],
importpath = "github.com/edgelesssys/constellation/v2/internal/sigstore",
visibility = ["//:__subpackages__"],
deps = [
"//internal/api/versionsapi",
"//internal/constants",
"@com_github_sigstore_rekor//pkg/client",
"@com_github_sigstore_rekor//pkg/generated/client",
"@com_github_sigstore_rekor//pkg/generated/client/entries",
"@com_github_sigstore_rekor//pkg/generated/client/index",
"@com_github_sigstore_rekor//pkg/generated/models",
"@com_github_sigstore_rekor//pkg/types/hashedrekord/v0.0.1:v0_0_1",
"@com_github_sigstore_rekor//pkg/verify",
"@com_github_sigstore_sigstore//pkg/cryptoutils",
"@com_github_sigstore_sigstore//pkg/signature",
"@com_github_theupdateframework_go_tuf//encrypted",
],
)
go_test(
name = "sigstore_test",
srcs = [
"rekor_test.go",
"sign_test.go",
"verify_test.go",
],
embed = [":sigstore"],
deps = [
"@com_github_sigstore_rekor//pkg/generated/models",
"@com_github_sigstore_rekor//pkg/types/hashedrekord/v0.0.1:v0_0_1",
"@com_github_stretchr_testify//assert",
"@com_github_stretchr_testify//require",
],
)