Struct CosignVerifier 

pub struct CosignVerifier {
    pub keyless: bool,
    pub public_key: Option<Vec<u8>>,
}

Cosign-compatible verifier for blob signatures and attestations

Fields

keyless: bool

Whether to use keyless verification (Fulcio) or key-based

public_key: Option<Vec<u8>>

Optional public key for key-based verification

Implementations

impl CosignVerifier

pub fn new_keyless() -> Self

pub fn new_with_key(public_key: Vec<u8>) -> Self

pub async fn new_with_key_file(key_path: &Path) -> Result<Self>

Load a public key from a file

pub fn new_with_key_string(key_str: &str) -> Self

Load a public key from a string (PEM or base64)

Trait Implementations

impl Verifier for CosignVerifier

fn verify<'life0, 'life1, 'life2, 'life3, 'async_trait>( &'life0 self, bundle: &'life1 ParsedBundle, artifact_path: &'life2 Path, policy: &'life3 Policy, ) -> Pin<Box<dyn Future<Output = Result<VerificationResult>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait, 'life3: 'async_trait,

Verify an attestation bundle against an artifact

fn verifier_type(&self) -> &'static str

Get the verifier type name for logging