https://github.com/openpubkey/signed-attestation

A library for signing in-toto attestations with OpenPubkey
https://github.com/openpubkey/signed-attestation

Last synced: 5 months ago
JSON representation

A library for signing in-toto attestations with OpenPubkey

• Host: GitHub
• URL: https://github.com/openpubkey/signed-attestation
• Owner: openpubkey
• License: apache-2.0
• Created: 2023-09-29T13:05:35.000Z (over 2 years ago)
• Default Branch: main
• Last Pushed: 2024-02-13T11:35:01.000Z (over 2 years ago)
• Last Synced: 2024-04-17T18:05:36.327Z (about 2 years ago)
• Language: Go
• Homepage:
• Size: 84 KB
• Stars: 8
• Watchers: 4
• Forks: 2
• Open Issues: 2
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# Signed attestations with OpenPubkey

This library is for signing [in-toto attestations](https://github.com/in-toto/attestation) with [OpenPubkey](https://github.com/openpubkey/openpubkey).

Two functions are provided:

- `SignInTotoStatement` takes an in-toto statement and returns a signed DSSE envelope.

- `VerifyInTotoEnvelope` takes a signed DSSE envelope, verifies the signature, and returns the in-toto statement

That's it!