Crate sigstore_sign 

Sigstore signature creation

This crate provides the main entry point for signing artifacts with Sigstore.

Example

use sigstore_sign::{SigningContext, SigningConfig};
use sigstore_oidc::IdentityToken;

let context = SigningContext::production();
let token = IdentityToken::new("your-identity-token".to_string());
let signer = context.signer(token);

let artifact = b"hello world";
let bundle = signer.sign(artifact).await?;

// Write bundle to file
std::fs::write("artifact.sigstore.json", bundle.to_json_pretty()?)?;

Re-exports

pub use error::Error;

pub use error::Result;

pub use sigstore_bundle as bundle;

pub use sigstore_crypto as crypto;

pub use sigstore_fulcio as fulcio;

pub use sigstore_oidc as oidc;

pub use sigstore_rekor as rekor;

pub use sigstore_tsa as tsa;

pub use sigstore_types as types;

Modules

error

Error types for sigstore-sign

Structs

Attestation

An attestation to be signed (in-toto statement)

AttestationSubject

A subject in an attestation

Signer

A signer for creating Sigstore signatures

SigningConfig

Configuration for signing operations

SigningContext

Context for signing operations

Functions

sign_context

Convenience function to create a signing context