pub struct DockerSignConfig {
pub id: Option<String>,
pub artifacts: Option<String>,
pub cmd: Option<String>,
pub args: Option<Vec<String>>,
pub signature: Option<String>,
pub certificate: Option<String>,
pub ids: Option<Vec<String>>,
pub stdin: Option<String>,
pub stdin_file: Option<String>,
pub env: Option<Vec<String>>,
pub output: Option<StringOrBool>,
pub if_condition: Option<String>,
}Fields§
§id: Option<String>Unique identifier for this docker sign config.
artifacts: Option<String>Docker artifact types to sign: “all”, “image”, or “manifest” (default: “none”).
cmd: Option<String>Signing command to invoke (default: “cosign”).
args: Option<Vec<String>>Arguments passed to the signing command (supports templates).
signature: Option<String>Signature output filename template (supports templates).
certificate: Option<String>Certificate file to embed in the signature (Cosign bundle signing).
ids: Option<Vec<String>>Docker config IDs filter: only sign images from configs whose id is in this list.
stdin: Option<String>Content written to the signing command’s stdin.
stdin_file: Option<String>Path to a file whose content is written to the signing command’s stdin.
env: Option<Vec<String>>Environment variables passed to the signing command.
output: Option<StringOrBool>Capture and log stdout/stderr of the docker signing command.
if_condition: Option<String>Template-conditional: skip this docker sign config if rendered result is “false” or empty.
Implementations§
Source§impl DockerSignConfig
impl DockerSignConfig
Sourcepub const DEFAULT_ID: &'static str = "default"
pub const DEFAULT_ID: &'static str = "default"
Default id when a docker-sign config has none. Mirrors GoReleaser
internal/pipe/sign/sign_docker.go (cfg.ID = "default").
Sourcepub const DEFAULT_CMD: &'static str = "cosign"
pub const DEFAULT_CMD: &'static str = "cosign"
Default signing cmd. Mirrors GoReleaser sign_docker.go
(cfg.Cmd = "cosign"). Unlike top-level signs:[] (which falls
back to git’s gpg.program config), docker signing only ever
targets cosign, so the default is a static literal.
Sourcepub const DEFAULT_ARTIFACTS: &'static str = ""
pub const DEFAULT_ARTIFACTS: &'static str = ""
Default artifacts filter when unset. Empty string is treated by
the docker-sign driver as “DockerImageV2 only” (post-buildx
canonical case). Mirrors GR’s lack of an explicit fallback —
GR’s switch on cfg.Artifacts treats "" identically.
Sourcepub const DEFAULT_ARGS: &[&'static str]
pub const DEFAULT_ARGS: &[&'static str]
Default args for docker_signs:[]. Mirrors GoReleaser
sign_docker.go (["sign", "--key=cosign.key", "${artifact}@${digest}", "--yes"]). Anodize substitutes
${artifact}@${digest} for the Tera-rewritten
{{ .Artifact }}@{{ .Digest }} placeholders.
Sourcepub fn resolved_id(&self) -> &str
pub fn resolved_id(&self) -> &str
Resolve the docker-sign id, falling back to "default" (GR-canonical).
Sourcepub fn resolved_cmd(&self) -> &str
pub fn resolved_cmd(&self) -> &str
Resolve the signing command, falling back to "cosign" (GR-canonical).
Sourcepub fn resolved_artifacts(&self) -> &str
pub fn resolved_artifacts(&self) -> &str
Resolve the artifacts filter, falling back to "" (DockerImageV2 only).
Sourcepub fn resolved_args(&self) -> Vec<String>
pub fn resolved_args(&self) -> Vec<String>
Resolve args, materializing the Self::DEFAULT_ARGS const into
a Vec<String> when the user left args: unset.
Trait Implementations§
Source§impl Clone for DockerSignConfig
impl Clone for DockerSignConfig
Source§fn clone(&self) -> DockerSignConfig
fn clone(&self) -> DockerSignConfig
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read moreSource§impl Debug for DockerSignConfig
impl Debug for DockerSignConfig
Source§impl Default for DockerSignConfig
impl Default for DockerSignConfig
Source§fn default() -> DockerSignConfig
fn default() -> DockerSignConfig
Source§impl<'de> Deserialize<'de> for DockerSignConfigwhere
DockerSignConfig: Default,
impl<'de> Deserialize<'de> for DockerSignConfigwhere
DockerSignConfig: Default,
Source§fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
Source§impl JsonSchema for DockerSignConfig
impl JsonSchema for DockerSignConfig
Source§fn schema_name() -> String
fn schema_name() -> String
Source§fn schema_id() -> Cow<'static, str>
fn schema_id() -> Cow<'static, str>
Source§fn json_schema(generator: &mut SchemaGenerator) -> Schema
fn json_schema(generator: &mut SchemaGenerator) -> Schema
Source§fn is_referenceable() -> bool
fn is_referenceable() -> bool
$ref keyword. Read more