Adrian Stobbe b51cc52945

config: sign Azure versions on upload & verify on fetch (#1836) ...

* add SignContent() + integrate into configAPI

* use static client for upload versions tool; fix staticupload calleeReference bug

* use version to get proper cosign pub key.

* mock fetcher in CLI tests

* only provide config.New constructor with fetcher

Co-authored-by: Otto Bittner <cobittner@posteo.net>
Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>

2023-06-01 13:55:46 +02:00

..

BUILD.bazel

config: sign Azure versions on upload & verify on fetch (#1836)

2023-06-01 13:55:46 +02:00

rekor_integration_test.go

todo responsibilities and cleanup (#1837)

2023-06-01 12:33:06 +02:00

rekor_test.go

Improve measurements verification with Rekor (#206)

2022-10-11 13:57:52 +02:00

rekor.go

cli: dynamically select signature validation pubkey for release and pre-release artifacts

2023-05-31 14:00:00 +02:00

sign_test.go

config: sign Azure versions on upload & verify on fetch (#1836)

2023-06-01 13:55:46 +02:00

sign.go

config: sign Azure versions on upload & verify on fetch (#1836)

2023-06-01 13:55:46 +02:00

sigstore.go

dev-docs: Go package docs (#958)

2023-01-19 15:57:50 +01:00

verify_test.go

cli: dynamically select signature validation pubkey for release and pre-release artifacts

2023-05-31 14:00:00 +02:00

verify.go

cli: dynamically select signature validation pubkey for release and pre-release artifacts

2023-05-31 14:00:00 +02:00