github/zot
1
0
Fork 0
mirror of https://github.com/project-zot/zot.git synced 2026-06-17 21:17:58 +08:00
Code Issues Packages Projects Releases Wiki Activity

feat(cosign): add support for cosign bundle (#4023)

Browse Source 
Signed-off-by: Ramkumar Chinchani <rchincha.dev@gmail.com>
This commit is contained in:
Ramkumar Chinchani
2026-05-01 00:21:06 -07:00
committed by GitHub
parent 993a17f5d0
commit 0b2eaa0f9a
15 changed files with 135 additions and 47 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/test/image-utils/images.go
+5
View File
@@ -268,6 +268,11 @@ func CreateMockCosignSignature(subject *ispec.Descriptor) Image {
ArtifactType(common.ArtifactTypeCosign).Build()
}
func CreateMockCosignBundleSignature(subject *ispec.Descriptor) Image {
return CreateImageWith().EmptyLayer().EmptyConfig().Subject(subject).
ArtifactType(common.ArtifactTypeCosignBundle).Build()
}
type BaseImageBuilder struct {
layers []Layer
pkg/test/oci-utils/oci_layout.go
+3 -3
View File
@@ -266,12 +266,12 @@ func (olu BaseOciLayoutUtils) checkCosignSignature(name string, digest godigest.
return true
}
mediaType := common.ArtifactTypeCosign
mediaTypes := []string{common.ArtifactTypeCosign, common.ArtifactTypeCosignBundle}
referrers, err := imageStore.GetReferrers(name, digest, []string{mediaType})
referrers, err := imageStore.GetReferrers(name, digest, mediaTypes)
if err != nil {
olu.Log.Info().Err(err).Str("repository", name).Str("digest",
digest.String()).Str("mediatype", mediaType).Msg("invalid cosign signature")
digest.String()).Interface("mediatypes", mediaTypes).Msg("invalid cosign signature")
return false
}