(art *artifact.DigestedArtifact, att *api.Attestation)
| 30 | } |
| 31 | |
| 32 | func (v *AttestationVerifier) VerifyAttestation(art *artifact.DigestedArtifact, att *api.Attestation) (*verification.AttestationProcessingResult, error) { |
| 33 | td, err := v.AttClient.GetTrustDomain() |
| 34 | if err != nil { |
| 35 | return nil, err |
| 36 | } |
| 37 | |
| 38 | verifier, err := verification.NewLiveSigstoreVerifier(verification.SigstoreConfig{ |
| 39 | ExternalHttpClient: v.ExternalHttpClient, |
| 40 | Logger: att_io.NewHandler(v.IO), |
| 41 | NoPublicGood: true, |
| 42 | TrustDomain: td, |
| 43 | TrustedRoot: v.TrustedRoot, |
| 44 | }) |
| 45 | if err != nil { |
| 46 | return nil, err |
| 47 | } |
| 48 | |
| 49 | policy := buildVerificationPolicy(*art, td) |
| 50 | sigstoreVerified, err := verifier.Verify([]*api.Attestation{att}, policy) |
| 51 | if err != nil { |
| 52 | return nil, err |
| 53 | } |
| 54 | |
| 55 | return sigstoreVerified[0], nil |
| 56 | } |
| 57 | |
| 58 | func FilterAttestationsByTag(attestations []*api.Attestation, tagName string) ([]*api.Attestation, error) { |
| 59 | var filtered []*api.Attestation |
nothing calls this directly
no test coverage detected