Dagger
Search

cosign

Cosign container image signing in a Dagger module

Installation

dagger install github.com/scottames/daggerverse/cosign@v0.0.7

Entrypoint

Return Type 
Cosign
Example
dagger -m github.com/scottames/daggerverse/cosign@b8be08edef060be9f4afbf1c461e22f5ef89c881 call \

func (m *MyModule) Example() *dagger.Cosign  {
	return dag.
			Cosign()
}
@function
def example() -> dagger.Cosign:
	return (
		dag.cosign()
	)
@func()
example(): Cosign {
	return dag
		.cosign()
}

Types

Cosign 🔗

Cosign represents the cosign Dagger module type

sign() 🔗

Sign will run cosign from the image, as defined by the cosignImage parameter, to sign the given Container image digests

Note: keyless signing not supported as-is

See https://edu.chainguard.dev/open-source/sigstore/cosign/an-introduction-to-cosign/

Return Type 
[String ! ] !
Arguments
NameTypeDefault ValueDescription
privateKeySecret !-

Cosign private key

passwordSecret !-

Cosign password

registryUsernameString -

registry username

registryPasswordSecret -

name of the image

dockerConfigFile -

Docker config

cosignImageString "chainguard/cosign:latest"

Cosign container image

cosignUserString "nonroot"

Cosign container image user

digests[String ! ] !-

Container image digests to sign

Example
dagger -m github.com/scottames/daggerverse/cosign@b8be08edef060be9f4afbf1c461e22f5ef89c881 call \
 sign --private-key env:MYSECRET --password env:MYSECRET --digests string1 --digests string2
func (m *MyModule) Example(ctx context.Context, privateKey *dagger.Secret, password *dagger.Secret, digests []string) []string  {
	return dag.
			Cosign().
			Sign(ctx, privateKey, password, digests)
}
@function
async def example(private_key: dagger.Secret, password: dagger.Secret, digests: List[str]) -> List[str]:
	return await (
		dag.cosign()
		.sign(private_key, password, digests)
	)
@func()
async example(privateKey: Secret, password: Secret, digests: string[]): Promise<string[]> {
	return dag
		.cosign()
		.sign(privateKey, password, digests)
}