ec.sigstore.verify_attestation

Use sigstore to verify the attestation of an image.

Usage

result = ec.sigstore.verify_attestation(ref: string, opts: object<ignore_rekor: boolean>[string: string])

Parameters

  • ref (string): OCI image reference

  • opts (object<ignore_rekor: boolean>[string: string]): Sigstore verification options. Dynamic string properties: certificate_identity, certificate_identity_regexp, certificate_oidc_issuer, certificate_oidc_issuer_regexp, public_key, rekor_url, rekor_public_key.

Return

result (object): the result of the verification request

The object contains the following attributes:

  • attestations (attestations: array<attestation: object<signatures: signatures: array<object<certificate: string, chain: array<string>, keyid: string, metadata: object[string: string], signature: string>>, statement: statement: any>>)

  • errors (errors: array<string>)

  • success (success: boolean)