github/zot
1
0
Fork 0
mirror of https://github.com/project-zot/zot.git synced 2026-06-15 20:07:55 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: call notation-go libs instead of using notation binary (#1104)

Browse Source 
fix: add loading notation path

Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com>
Co-authored-by: Roxana Nemulescu <roxana.nemulescu@gmail.com>
This commit is contained in:
Andreea Lupu
2023-02-13 20:43:52 +02:00
committed by GitHub
parent 2377d62344
commit ee95ab0ffc
21 changed files with 1731 additions and 333 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/blackbox/annotations.bats
+24 -2
View File
@@ -119,11 +119,33 @@ function teardown_file() {
[ $(echo "${lines[-1]}" | jq '.data.ImageList[0].RepoName') = '"annotations"' ]
[ "$status" -eq 0 ]
run notation cert generate-test --trust "notation-sign-test"
run notation cert generate-test "notation-sign-test"
[ "$status" -eq 0 ]
local trust_policy_file=${HOME}/.config/notation/trustpolicy.json
cat >${trust_policy_file} <<EOF
{
"version": "1.0",
"trustPolicies": [
{
"name": "notation-sign-test",
"registryScopes": [ "*" ],
"signatureVerification": {
"level" : "strict"
},
"trustStores": [ "ca:notation-sign-test" ],
"trustedIdentities": [
"*"
]
}
]
}
EOF
run notation sign --key "notation-sign-test" --plain-http localhost:8080/annotations:latest
[ "$status" -eq 0 ]
run notation verify --cert "notation-sign-test" --plain-http localhost:8080/annotations:latest
run notation verify --plain-http localhost:8080/annotations:latest
[ "$status" -eq 0 ]
run notation list --plain-http localhost:8080/annotations:latest
[ "$status" -eq 0 ]
test/blackbox/sync.bats
+26 -4
View File
@@ -248,11 +248,33 @@ function teardown_file() {
}
@test "sign/verify with notation" {
run notation cert generate-test --trust "notation-sign-sync-test"
run notation cert generate-test "notation-sign-sync-test"
[ "$status" -eq 0 ]
local trust_policy_file=${HOME}/.config/notation/trustpolicy.json
cat >${trust_policy_file} <<EOF
{
"version": "1.0",
"trustPolicies": [
{
"name": "notation-sign-sync-test",
"registryScopes": [ "*" ],
"signatureVerification": {
"level" : "strict"
},
"trustStores": [ "ca:notation-sign-sync-test" ],
"trustedIdentities": [
"*"
]
}
]
}
EOF
run notation sign --key "notation-sign-sync-test" --plain-http localhost:9000/golang:1.19
[ "$status" -eq 0 ]
run notation verify --cert "notation-sign-sync-test" --plain-http localhost:9000/golang:1.19
run notation verify --plain-http localhost:9000/golang:1.19
[ "$status" -eq 0 ]
run notation list --plain-http localhost:9000/golang:1.19
[ "$status" -eq 0 ]
@@ -262,7 +284,7 @@ function teardown_file() {
# wait for signatures to be copied
run sleep 5s
run notation verify --cert "notation-sign-sync-test" --plain-http localhost:8081/golang:1.19
run notation verify --plain-http localhost:8081/golang:1.19
[ "$status" -eq 0 ]
run cosign verify --key cosign.pub localhost:8081/golang:1.19
@@ -270,7 +292,7 @@ function teardown_file() {
}
@test "sync signatures ondemand" {
run notation verify --cert "notation-sign-sync-test" --plain-http localhost:8082/golang:1.19
run notation verify --plain-http localhost:8082/golang:1.19
[ "$status" -eq 0 ]
run cosign verify --key cosign.pub localhost:8082/golang:1.19