bundle

package

v0.1.1 Latest Latest Go to latest Published: Aug 15, 2025 License: Apache-2.0 Imports: 21 Imported by: 2

Details

Packager bundle provides functionality to work with the sigstore budle format

This section is empty.

This section is empty.

This section is empty.

type Envelope struct {
	sigstore.Bundle
	Signatures []attestation.Signature
	Statement  attestation.Statement
}

func (e *Envelope) GetCertificate() attestation.Certificate

func (env *Envelope) GetPredicate() attestation.Predicate

func (e *Envelope) GetSignatures() []attestation.Signature

func (e *Envelope) GetStatement() attestation.Statement

func (e *Envelope) GetStatementOrErr() (attestation.Statement, error)

func (env *Envelope) GetVerification() attestation.Verification

GetVerifications returns the signtature verifications stored in the predicate (via the statement)

func (e *Envelope) UnmarshalJSON(data []byte) error

func (e *Envelope) Verify() error

Verify checks the bundle signatures and generatesit Verification data. If the envelope is already verified, the signatures are not verified again.

type Parser struct{}

func (p *Parser) FileExtensions() []string

FileExtensions returns the file extennsions this parser will look at.

func (p *Parser) Parse(data []byte) ([]attestation.Envelope, error)

func (p *Parser) ParseFile(path string) ([]attestation.Envelope, error)

ParseFile parses a sigstore bundle and returns the envelope

func (p *Parser) ParseStream(r io.Reader) ([]attestation.Envelope, error)

ParseFile parses a file and returns all envelopes in it.