wszystkie opcje
trixie  ] [  forky  ] [  sid  ]
[ Pakiet źródłowy: sigstore-go  ]

Pakiet: sigstore-go (0.7.1-2 i inne)

Odnośniki dla sigstore-go

Screenshot

Zasoby systemu Debian:

Pobieranie pakietu źródłowego sigstore-go:

Opiekunowie:

Zasoby zewnętrzne:

Podobne pakiety:

Sigstore signing and verification (program)

A client library for Sigstore (https://www.sigstore.dev/), written in Go. Features:

 * Signing and verification of Sigstore bundles
   (https://github.com/sigstore/protobuf-
   specs/blob/main/protos/sigstore_bundle.proto) compliant with Sigstore
   Client Spec
 * Verification of raw Sigstore signatures by creating bundles for them
   (see conformance tests (/cmd/conformance/main.go) for example)
 * Signing and verifying with a Timestamp Authority (TSA)
 * Signing and verifying (offline or online) with Rekor (Artifact
   Transparency Log)
 * Structured verification results including certificate metadata
 * TUF support
 * Verification support for custom trusted root
   (https://github.com/sigstore/protobuf-
   specs/blob/main/protos/sigstore_trustroot.proto)
 * Basic CLI and examples

For an example of how to use this library, see the verification documentation (/docs/verification.md), the CLI cmd/sigstore-go (/cmd/sigstore-go/main.go). Note that the CLI is to demonstrate how to use the library, and not intended as a fully- featured Sigstore CLI like cosign (https://github.com/sigstore/cosign).

Background

Sigstore already has a canonical Go client implementation, cosign (https://github.com/sigstore/cosign), which was developed with a focus on container image signing/verification. It has a rich CLI and a long legacy of features and development. sigstore-go is a more minimal and friendly API for integrating Go code with Sigstore, with a focus on the newly specified data structures in sigstore/protobuf-specs (https://github.com/sigstore/protobuf-specs). sigstore-go attempts to minimize the dependency tree for simple signing and verification tasks, omitting KMS support and container image verification.

This package contains the binaries.

Inne pakiety związane z sigstore-go

  • wymaga
  • poleca
  • sugeruje
  • enhances

Pobieranie sigstore-go

Pobierz dla wszystkich dostępnych architektur
Architektura Wersja Rozmiar pakietu Rozmiar po instalacji Pliki
amd64 0.7.1-2+b4 12 703,7 KiB44 093,0 KiB [lista plików]
arm64 0.7.1-2+b4 10 858,3 KiB41 615,0 KiB [lista plików]
armel 0.7.1-2+b4 11 051,0 KiB42 078,0 KiB [lista plików]
armhf 0.7.1-2+b4 11 039,9 KiB41 886,0 KiB [lista plików]
i386 0.7.1-2+b4 11 902,9 KiB41 965,0 KiB [lista plików]
ppc64el 0.7.1-2+b4 10 720,6 KiB43 277,0 KiB [lista plików]
riscv64 0.7.1-2+b4 11 233,7 KiB41 933,0 KiB [lista plików]
s390x 0.7.1-2+b4 11 405,0 KiB46 541,0 KiB [lista plików]