ec.sigstore.verify_image

Use sigstore to verify the signature of an image.

Usage

result = ec.sigstore.verify_image(ref: string, opts: object<ignore_rekor: boolean>[string: string])

Parameters

  • ref (string): OCI image reference

  • opts (object<ignore_rekor: boolean>[string: string]): Sigstore verification options. Dynamic string properties: certificate_identity, certificate_identity_regexp, certificate_oidc_issuer, certificate_oidc_issuer_regexp, public_key, rekor_url, rekor_public_key.

Return

result (object): the result of the verification request

The object contains the following attributes:

  • errors (errors: array<string>)

  • signatures (signatures: array<object<certificate: string, chain: array<string>, keyid: string, metadata: object[string: string], signature: string>>)

  • success (success: boolean)