Function createAndPushKeylessImage

acceptance/image/image.go:1041–1182

createAndPushKeylessImage loads an existing image from disk, along its signature and attestation into the docker registry.

(ctx context.Context, imageName string)

// createAndPushKeylessImage loads an existing image from disk, along its signature and attestation
// into the docker registry.
func createAndPushKeylessImage(ctx context.Context, imageName string) (context.Context, error) {
	ref, err := registry.ImageReferenceInStubRegistry(ctx, imageName)
	if err != nil {
		return ctx, err
	}

	cwd, err := os.Getwd()
	if err != nil {
		return ctx, err
	}

	imageDir := path.Join(cwd, "acceptance", "image", "testimage")
	// get the signed image from disk
	sii, err := layout.SignedImageIndex(imageDir)
	if err != nil {
		return ctx, err
	}

	if err := cosignRemote.WriteSignedImageIndexImages(ref, sii, ""); err != nil {
		return ctx, err
	}

	var state *imageState
	ctx, err = testenv.SetupState(ctx, &state)
	if err != nil {
		return ctx, err
	}

	if state.Images == nil {
		state.Images = make(map[string]string)
	}
	state.Images[imageName] = ref.String()

	storeSignatureData := func(where map[string]Signature, f func() (oci.Signatures, error)) error {
		sigs, err := f()
		if err != nil {
			return err
		}

		m, err := sigs.Manifest()
		if err != nil {
			return err
		}

		// read the signature from the layer annotations
		for _, l := range m.Layers {
			// just check for a single annotation
			var signature string
			var ok bool
			if signature, ok = l.Annotations[static.SignatureAnnotationKey]; !ok {
				continue
			}

			sig := Signature{
				Signature: signature,
			}

			if certPEM, ok := l.Annotations[static.CertificateAnnotationKey]; ok {