Function VerifyPlugin

internal/plugin/verify.go:25–34

VerifyPlugin verifies plugin data against a signature using data in memory.

(archiveData, provData []byte, filename, keyring string)

// VerifyPlugin verifies plugin data against a signature using data in memory.
func VerifyPlugin(archiveData, provData []byte, filename, keyring string) (*provenance.Verification, error) {
	// Create signatory from keyring
	sig, err := provenance.NewFromKeyring(keyring, "")
	if err != nil {
		return nil, err
	}

	// Use the new VerifyData method directly
	return sig.Verify(archiveData, provData, filename)
}

// IsTarball checks if a file has a tarball extension
func IsTarball(filename string) bool {