wsc 0.9.0

WebAssembly Signature Component - WASM signing and verification toolkit
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

//! Container image signing via cosign delegation.
//!
//! Provides safe cosign subprocess delegation with binary integrity
//! verification, tag-to-digest resolution, and digest-bound signatures.
//! Addresses UCA-18 through UCA-21 from the STPA-Sec analysis.
//!
//! # Design
//!
//! sigil delegates container signing to cosign but enforces:
//! - Binary integrity verification before invocation (AS-20)
//! - Tag-to-digest resolution (AS-18)
//! - Digest binding in signatures (AS-21)
//! - Signature existence verification (AS-19)
//!
//! # Example
//!
//! ```ignore
//! use wsc::container::{ImageReference, CosignDelegator};
//!
//! let delegator = CosignDelegator::new()?;
//! let image = ImageReference::parse("ghcr.io/pulseengine/wsc:v0.5.1")?;
//! let resolved = delegator.resolve_digest(&image)?;
//! delegator.sign(&resolved)?;
//! ```

pub mod bundle;
pub mod cosign;
pub mod digest;
pub mod referrer;

pub use bundle::SigstoreBundle;
pub use cosign::{CosignConfig, CosignDelegator};
pub use digest::ImageReference;
pub use referrer::{ReferrerConfig, SignatureReference};