Debian NEW package overview for sigstore-go
| sigstore-go_0.6.2-1_amd64.changes (click to toggle) | |
|---|---|
| Format: | 1.8 |
| Date: | Tue, 22 Oct 2024 22:40:21 +0000 |
| Source: | sigstore-go |
| Binary: | golang-github-sigstore-sigstore-go-dev sigstore-go sigstore-go-dbgsym |
| Architecture: | source all amd64 |
| Version: | 0.6.2-1 |
| Distribution: | unstable |
| Urgency: | medium |
| Maintainer: | Debian Go Packaging Team <team+pkg-go@tracker.debian.org> |
| Changed-By: | Simon Josefsson <simon@josefsson.org> |
| Description: | golang-github-sigstore-sigstore-go-dev - Sigstore signing and verification (Go library) sigstore-go - Sigstore signing and verification (program) |
| Closes: | 1085854 |
| Changes: | sigstore-go (0.6.2-1) unstable; urgency=medium * Initial release (Closes: #1085854) |
| Files: | 4d04e04e66d9803a17499d3bbeab5c27 2320 golang optional sigstore-go_0.6.2-1.dsc 5499ef4b8d94d7d8dca9162f5a2fc8e1 166365 golang optional sigstore-go_0.6.2.orig.tar.gz 69f205649648c46128d43bd51c5f1017 3316 golang optional sigstore-go_0.6.2-1.debian.tar.xz bf3cbd437f0aa6bcd820e0db945162dd 94580 golang optional golang-github-sigstore-sigstore-go-dev_0.6.2-1_all.deb f0ce29337d68a92f99e69957fa93984a 19385264 debug optional sigstore-go-dbgsym_0.6.2-1_amd64.deb fa48b3d2af89a95c1dffce0700fd8ad7 27757 golang optional sigstore-go_0.6.2-1_amd64.buildinfo ff69455a0937d3d01d58b71c92c9ea22 17212464 golang optional sigstore-go_0.6.2-1_amd64.deb |
| sigstore-go_0.6.2-1.dsc (click to toggle) | |
|---|---|
| Format: | 3.0 (quilt) |
| Source: | sigstore-go |
| Binary: | sigstore-go, golang-github-sigstore-sigstore-go-dev |
| Architecture: | any all |
| Version: | 0.6.2-1 |
| Maintainer: | Debian Go Packaging Team <team+pkg-go@tracker.debian.org> |
| Uploaders: | Simon Josefsson <simon@josefsson.org>, |
| Homepage: | https://github.com/sigstore/sigstore-go |
| Standards-Version: | 4.7.0 |
| Vcs-Browser: | https://salsa.debian.org/go-team/packages/sigstore-go |
| Vcs-Git: | https://salsa.debian.org/go-team/packages/sigstore-go.git |
| Testsuite: | autopkgtest-pkg-go |
| Build-Depends: | debhelper-compat (=13), dh-sequence-golang, golang-any, golang-github-digitorus-timestamp-dev, golang-github-go-openapi-runtime-dev, golang-github-go-openapi-strfmt-dev, golang-github-go-openapi-swag-dev, golang-github-google-certificate-transparency-dev, golang-github-in-toto-attestation-dev, golang-github-in-toto-in-toto-golang-dev, golang-github-secure-systems-lab-go-securesystemslib-dev, golang-github-sigstore-protobuf-specs-dev (>>0.3.2-1~), golang-github-sigstore-rekor-dev (>>1.3.6-2~), golang-github-sigstore-sigstore-dev (>>1.8.10-2~), golang-github-sigstore-timestamp-authority-dev, golang-github-stretchr-testify-dev, golang-github-theupdateframework-go-tuf-dev (>>2.0.2~), golang-golang-x-crypto-dev, golang-golang-x-mod-dev, golang-google-protobuf-dev |
| Package-List: | golang-github-sigstore-sigstore-go-dev deb golang optional arch=all sigstore-go deb golang optional arch=any |
| Files: | 5499ef4b8d94d7d8dca9162f5a2fc8e1 166365 sigstore-go_0.6.2.orig.tar.gz 69f205649648c46128d43bd51c5f1017 3316 sigstore-go_0.6.2-1.debian.tar.xz |
| Go-Import-Path: | github.com/sigstore/sigstore-go |
| control file for golang-github-sigstore-sigstore-go-dev_0.6.2-1_all.deb (click to toggle) | |
|---|---|
| Package: | golang-github-sigstore-sigstore-go-dev |
| Source: | sigstore-go |
| Version: | 0.6.2-1 |
| Architecture: | all |
| Maintainer: | Debian Go Packaging Team <team+pkg-go@tracker.debian.org> |
| Installed-Size: | 501 |
| Depends: | golang-github-digitorus-pkcs7-dev, golang-github-digitorus-timestamp-dev, golang-github-go-openapi-runtime-dev, golang-github-go-openapi-strfmt-dev, golang-github-go-openapi-swag-dev, golang-github-google-certificate-transparency-dev, golang-github-in-toto-attestation-dev, golang-github-in-toto-in-toto-golang-dev, golang-github-secure-systems-lab-go-securesystemslib-dev, golang-github-sigstore-protobuf-specs-dev (>>0.3.2-1~), golang-github-sigstore-rekor-dev (>>1.3.6-2~), golang-github-sigstore-sigstore-dev (>>1.8.10-2~), golang-github-sigstore-timestamp-authority-dev, golang-github-stretchr-testify-dev, golang-github-theupdateframework-go-tuf-dev (>>2.0.2~), golang-golang-x-crypto-dev, golang-golang-x-mod-dev, golang-google-protobuf-dev |
| Section: | golang |
| Priority: | optional |
| Multi-Arch: | foreign |
| Homepage: | https://github.com/sigstore/sigstore-go |
| Description: | Sigstore signing and verification (Go library)
A client library for Sigstore (https://www.sigstore.dev/), written in
Go. Features:
.
* Signing and verification of Sigstore bundles
(https://github.com/sigstore/protobuf-
specs/blob/main/protos/sigstore_bundle.proto) compliant with Sigstore
Client Spec
* Verification of raw Sigstore signatures by creating bundles for them
(see conformance tests (/cmd/conformance/main.go) for example)
* Signing and verifying with a Timestamp Authority (TSA)
* Signing and verifying (offline or online) with Rekor (Artifact
Transparency Log)
* Structured verification results including certificate metadata
* TUF support
* Verification support for custom trusted root
(https://github.com/sigstore/protobuf-
specs/blob/main/protos/sigstore_trustroot.proto)
* Basic CLI and examples
.
For an example of how to use this library, see the verification
documentation (/docs/verification.md), the CLI cmd/sigstore-go
(/cmd/sigstore-go/main.go). Note that the CLI
is to demonstrate how to use the library, and not intended as a fully-
featured Sigstore CLI like cosign (https://github.com/sigstore/cosign).
.
Background
.
Sigstore already has a canonical Go client implementation, cosign
(https://github.com/sigstore/cosign), which was developed with a focus
on container image signing/verification. It has a rich CLI and a long
legacy of features and development. sigstore-go is a more minimal and
friendly API for integrating Go code with Sigstore, with a focus on the
newly specified data structures in sigstore/protobuf-specs
(https://github.com/sigstore/protobuf-specs). sigstore-go attempts to
minimize the dependency tree for simple signing and verification tasks,
omitting KMS support and container image verification.
.
This package contains the Go library. |
| contents of golang-github-sigstore-sigstore-go-dev_0.6.2-1_all.deb (click to toggle) | |
|---|---|
drwxr-xr-x root/root 0 2024-10-22 22:40 ./ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/doc/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/doc/golang-github-sigstore-sigstore-go-dev/ -rw-r--r-- root/root 159 2024-10-22 22:40 ./usr/share/doc/golang-github-sigstore-sigstore-go-dev/changelog.Debian.gz -rw-r--r-- root/root 1079 2024-10-22 22:40 ./usr/share/doc/golang-github-sigstore-sigstore-go-dev/copyright drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/cmd/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/cmd/conformance/ -rw-r--r-- root/root 10040 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/cmd/conformance/main.go drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/cmd/sigstore-go/ -rw-r--r-- root/root 7687 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/cmd/sigstore-go/main.go drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/examples/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/examples/oci-image-verification/ -rw-r--r-- root/root 16199 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/examples/oci-image-verification/main.go drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/examples/sigstore-go-signing/ -rw-r--r-- root/root 3797 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/examples/sigstore-go-signing/main.go -rw-r--r-- root/root 4831 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/go.mod -rw-r--r-- root/root 40909 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/go.sum drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/bundle/ -rw-r--r-- root/root 12043 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/bundle/bundle.go -rw-r--r-- root/root 30156 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/bundle/bundle_test.go -rw-r--r-- root/root 1393 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/bundle/fuzz_test.go -rw-r--r-- root/root 2540 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/bundle/signature_content.go -rw-r--r-- root/root 2137 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/bundle/verification_content.go drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/fulcio/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/fulcio/certificate/ -rw-r--r-- root/root 11081 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/fulcio/certificate/extensions.go -rw-r--r-- root/root 2646 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/fulcio/certificate/summarize.go -rw-r--r-- root/root 5913 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/fulcio/certificate/summarize_test.go drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/root/ -rw-r--r-- root/root 5424 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/root/trusted_material.go -rw-r--r-- root/root 14291 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/root/trusted_root.go -rw-r--r-- root/root 7325 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/root/trusted_root_create.go drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/sign/ -rw-r--r-- root/root 5494 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/sign/certificate.go -rw-r--r-- root/root 3335 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/sign/certificate_test.go -rw-r--r-- root/root 2173 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/sign/content.go -rw-r--r-- root/root 1556 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/sign/content_test.go -rw-r--r-- root/root 3396 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/sign/keys.go -rw-r--r-- root/root 1674 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/sign/keys_test.go -rw-r--r-- root/root 5425 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/sign/signer.go -rw-r--r-- root/root 1082 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/sign/signer_test.go -rw-r--r-- root/root 3048 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/sign/timestamping.go -rw-r--r-- root/root 2495 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/sign/timestamping_test.go -rw-r--r-- root/root 4438 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/sign/transparency.go -rw-r--r-- root/root 3831 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/sign/transparency_test.go drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/testing/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/testing/ca/ -rw-r--r-- root/root 19719 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/testing/ca/ca.go drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/testing/data/ -rw-r--r-- root/root 3275 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/testing/data/data.go -rw-r--r-- root/root 6613 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/testing/data/othernameBundle.json -rw-r--r-- root/root 10767 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/testing/data/sigstore.js@2.0.0-provenanceBundle.json -rw-r--r-- root/root 8245 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/testing/data/sigstoreBundle.json -rw-r--r-- root/root 8383 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/testing/data/sigstoreBundle2Sig.json -rw-r--r-- root/root 3467 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/testing/data/trusted-root-scaffolding.json drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/tlog/ -rw-r--r-- root/root 8864 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/tlog/entry.go -rw-r--r-- root/root 1863 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/tlog/fuzz_test.go drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/tuf/ -rw-r--r-- root/root 5903 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/tuf/client.go -rw-r--r-- root/root 13248 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/tuf/client_test.go -rw-r--r-- root/root 1301 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/tuf/config.go -rw-r--r-- root/root 1197 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/tuf/config_test.go -rw-r--r-- root/root 5322 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/tuf/options.go drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/tuf/repository/ -rw-r--r-- root/root 6767 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/tuf/repository/root.json -rw-r--r-- root/root 4503 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/tuf/repository/staging_root.json -rw-r--r-- root/root 50 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/tuf/testing.local.json drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/util/ -rw-r--r-- root/root 958 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/util/util.go drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/verify/ -rw-r--r-- root/root 1970 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/verify/certificate.go -rw-r--r-- root/root 7075 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/verify/certificate_identity.go -rw-r--r-- root/root 6590 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/verify/certificate_identity_test.go -rw-r--r-- root/root 1800 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/verify/certificate_test.go -rw-r--r-- root/root 2721 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/verify/dsse_test.go -rw-r--r-- root/root 990 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/verify/errors.go -rw-r--r-- root/root 6192 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/verify/fuzz_test.go -rw-r--r-- root/root 3160 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/verify/interface.go -rw-r--r-- root/root 2503 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/verify/sct.go -rw-r--r-- root/root 12442 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/verify/sct_test.go -rw-r--r-- root/root 9537 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/verify/signature.go -rw-r--r-- root/root 7065 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/verify/signature_test.go -rw-r--r-- root/root 29231 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/verify/signed_entity.go -rw-r--r-- root/root 6301 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/verify/tlog.go -rw-r--r-- root/root 8387 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/verify/tlog_test.go -rw-r--r-- root/root 4492 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/verify/tsa.go -rw-r--r-- root/root 7531 2024-10-22 22:40 ./usr/share/gocode/src/github.com/sigstore/sigstore-go/pkg/verify/tsa_test.go | |
| copyright of golang-github-sigstore-sigstore-go-dev_0.6.2-1_all.deb (click to toggle) | |
|---|---|
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Source: https://github.com/sigstore/sigstore-go Upstream-Name: sigstore-go Files: * Copyright: 2023-2024 The Sigstore Authors. License: Apache-2.0 Files: debian/* Copyright: 2024 Simon Josefsson <simon@josefsson.org> License: Apache-2.0 Comment: Debian packaging is licensed under the same terms as upstream License: Apache-2.0 Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at . https://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. Comment: On Debian systems, the complete text of the Apache version 2.0 license can be found in "/usr/share/common-licenses/Apache-2.0". | |
| control file for sigstore-go_0.6.2-1_amd64.deb (click to toggle) | |
|---|---|
| Package: | sigstore-go |
| Version: | 0.6.2-1 |
| Architecture: | amd64 |
| Maintainer: | Debian Go Packaging Team <team+pkg-go@tracker.debian.org> |
| Installed-Size: | 57914 |
| Depends: | libc6 (>=2.34) |
| Built-Using: | docker-registry (= 2.8.3+ds1-2), docker.io (= 26.1.5+dfsg1-2), go-containerregistry (= 0.20.1+ds1-1), golang-1.23 (= 1.23.2-1), golang-fsnotify (= 1.7.0-1), golang-github-asaskevich-govalidator (= 11.0.1-1), golang-github-blang-semver (= 4.0.0-1), golang-github-cespare-xxhash (= 2.3.0-1), golang-github-containerd-stargz-snapshotter (= 0.14.3-3), golang-github-coreos-go-oidc-v3 (= 3.4.0-2), golang-github-davecgh-go-spew (= 1.1.1-3), golang-github-digitorus-pkcs7 (= 0.0~git20230818.3a137a8-1), golang-github-digitorus-timestamp (= 0.0~git20231217.220c5c2-1), golang-github-docker-docker-credential-helpers (= 0.6.4+ds1-1), golang-github-go-chi-chi (= 5.1.0-1), golang-github-go-jose-go-jose.v3 (= 3.0.3-6), golang-github-go-logr-logr (= 1.4.2-2), golang-github-go-logr-stdr (= 1.2.2-4), golang-github-go-openapi-analysis (= 0.23.0-1), golang-github-go-openapi-errors (= 0.22.0-1), golang-github-go-openapi-jsonpointer (= 1:0.21.0-1), golang-github-go-openapi-jsonreference (= 1:0.21.0-1), golang-github-go-openapi-loads (= 0.22.0-1), golang-github-go-openapi-runtime (= 0.28.0-1), golang-github-go-openapi-spec (= 1:0.21.0-1), golang-github-go-openapi-strfmt (= 0.23.0-1), golang-github-go-openapi-swag (= 1:0.23.0-1), golang-github-go-openapi-validate (= 0.24.0-2), golang-github-google-certificate-transparency (= 1.2.1-4), golang-github-google-uuid (= 1.6.0-1), golang-github-hashicorp-go-cleanhttp (= 0.5.2-1), golang-github-hashicorp-go-retryablehttp (= 0.7.1-1), golang-github-hashicorp-hcl (= 1.0.0-1.1), golang-github-in-toto-attestation (= 1.1.0-1), golang-github-jedisct1-go-minisign (= 0.2.1-1), golang-github-josharian-intern (= 1.0.0-3), golang-github-klauspost-compress (= 1.17.10+ds1-1), golang-github-magiconair-properties (= 1.8.7-1), golang-github-mailru-easyjson (= 0.7.7-1), golang-github-mitchellh-go-homedir (= 1.1.0-1), golang-github-mitchellh-mapstructure (= 1.5.0+git20231216.8508981-1), golang-github-oklog-ulid (= 2.0.2+ds-2), golang-github-opencontainers-go-digest (= 1.0.0-2), golang-github-opencontainers-image-spec (= 1.1.0-2), golang-github-opentracing-opentracing-go (= 1.2.0-2), golang-github-pelletier-go-toml.v2 (= 2.2.1-1), golang-github-pkg-errors (= 0.9.1-3), golang-github-pmezard-go-difflib (= 1.0.0-3), golang-github-secure-systems-lab-go-securesystemslib (= 0.8.0-2), golang-github-segmentio-ksuid (= 1.0.4-2), golang-github-shibumi-go-pathspec (= 1.3.0-2), golang-github-sigstore-protobuf-specs (= 0.3.2-1), golang-github-sigstore-sigstore (= 1.8.10-2), golang-github-sigstore-timestamp-authority (= 1.2.3-1), golang-github-skratchdot-open-golang (= 0.0~git20160302.0.75fb7ed-2.1), golang-github-spf13-afero (= 1.11.0-1), golang-github-spf13-cast (= 1.6.0-1), golang-github-spf13-cobra (= 1.8.1-1), golang-github-spf13-jwalterweatherman (= 1.1.0+really1.1.0-2), golang-github-spf13-pflag (= 1.0.6~git20210604-d5e0c0615ace-1), golang-github-spf13-viper (= 1.12.0-1), golang-github-subosito-gotenv (= 1.3.0-1), golang-github-theupdateframework-go-tuf (= 2.0.2-1~exp0), golang-github-transparency-dev-merkle (= 0.0.2-2), golang-github-vbatts-tar-split (= 0.11.5-1), golang-go.crypto (= 1:0.25.0-1), golang-go.uber-atomic (= 1.11.0-1), golang-go.uber-multierr (= 1.6.0-1), golang-go.uber-zap (= 1.26.0-1), golang-golang-x-exp (= 0.0~git20231006.7918f67-1), golang-golang-x-mod (= 0.19.0-1), golang-golang-x-net (= 1:0.27.0-1), golang-golang-x-oauth2 (= 0.15.0-1), golang-golang-x-sync (= 0.7.0-1), golang-golang-x-sys (= 0.22.0-1), golang-golang-x-term (= 0.22.0-1), golang-golang-x-text (= 0.16.0-1), golang-google-genproto (= 0.0~git20210726.e7812ac-4), golang-google-protobuf (= 1.33.0-1), golang-gopkg-ini.v1 (= 1.67.0-1), golang-gopkg-square-go-jose.v2 (= 2.6.3-3), golang-gopkg-yaml.v3 (= 3.0.1-3), golang-k8s-klog (= 2.130.1-1), golang-logrus (= 1.9.0-1), golang-mongodb-mongo-driver (= 1.17.1+ds1-1), golang-opentelemetry-otel (= 1.21.0-4), golang-testify (= 1.9.0-1), golang-webpki-org-jsoncanonicalizer (= 0.20210204-1.1), in-toto-golang (= 0.9.0+ds-3), rekor (= 1.3.6-2), relic (= 7.6.1-2) |
| Section: | golang |
| Priority: | optional |
| Homepage: | https://github.com/sigstore/sigstore-go |
| Description: | Sigstore signing and verification (program)
A client library for Sigstore (https://www.sigstore.dev/), written in
Go. Features:
.
* Signing and verification of Sigstore bundles
(https://github.com/sigstore/protobuf-
specs/blob/main/protos/sigstore_bundle.proto) compliant with Sigstore
Client Spec
* Verification of raw Sigstore signatures by creating bundles for them
(see conformance tests (/cmd/conformance/main.go) for example)
* Signing and verifying with a Timestamp Authority (TSA)
* Signing and verifying (offline or online) with Rekor (Artifact
Transparency Log)
* Structured verification results including certificate metadata
* TUF support
* Verification support for custom trusted root
(https://github.com/sigstore/protobuf-
specs/blob/main/protos/sigstore_trustroot.proto)
* Basic CLI and examples
.
For an example of how to use this library, see the verification
documentation (/docs/verification.md), the CLI cmd/sigstore-go
(/cmd/sigstore-go/main.go). Note that the CLI
is to demonstrate how to use the library, and not intended as a fully-
featured Sigstore CLI like cosign (https://github.com/sigstore/cosign).
.
Background
.
Sigstore already has a canonical Go client implementation, cosign
(https://github.com/sigstore/cosign), which was developed with a focus
on container image signing/verification. It has a rich CLI and a long
legacy of features and development. sigstore-go is a more minimal and
friendly API for integrating Go code with Sigstore, with a focus on the
newly specified data structures in sigstore/protobuf-specs
(https://github.com/sigstore/protobuf-specs). sigstore-go attempts to
minimize the dependency tree for simple signing and verification tasks,
omitting KMS support and container image verification.
.
This package contains the binaries. |
| contents of sigstore-go_0.6.2-1_amd64.deb (click to toggle) | |
|---|---|
drwxr-xr-x root/root 0 2024-10-22 22:40 ./ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/bin/ -rwxr-xr-x root/root 16773152 2024-10-22 22:40 ./usr/bin/conformance -rwxr-xr-x root/root 13111392 2024-10-22 22:40 ./usr/bin/oci-image-verification -rwxr-xr-x root/root 12632608 2024-10-22 22:40 ./usr/bin/sigstore-go -rwxr-xr-x root/root 16756800 2024-10-22 22:40 ./usr/bin/sigstore-go-signing drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/doc/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/doc/sigstore-go/ -rw-r--r-- root/root 1921 2024-09-10 13:37 ./usr/share/doc/sigstore-go/README.md.gz -rw-r--r-- root/root 159 2024-10-22 22:40 ./usr/share/doc/sigstore-go/changelog.Debian.gz -rw-r--r-- root/root 1079 2024-10-22 22:40 ./usr/share/doc/sigstore-go/copyright -rw-r--r-- root/root 6532 2024-09-10 13:37 ./usr/share/doc/sigstore-go/oci-image-verification.md.gz -rw-r--r-- root/root 2422 2024-09-10 13:37 ./usr/share/doc/sigstore-go/signing.md.gz -rw-r--r-- root/root 3555 2024-09-10 13:37 ./usr/share/doc/sigstore-go/verification.md.gz | |
| copyright of sigstore-go_0.6.2-1_amd64.deb (click to toggle) | |
|---|---|
NOTE: Copyright is the same as golang-github-sigstore-sigstore-go-dev (golang-github-sigstore-sigstore-go-dev_0.6.2-1_all.deb). Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Source: https://github.com/sigstore/sigstore-go Upstream-Name: sigstore-go Files: * Copyright: 2023-2024 The Sigstore Authors. License: Apache-2.0 Files: debian/* Copyright: 2024 Simon Josefsson <simon@josefsson.org> License: Apache-2.0 Comment: Debian packaging is licensed under the same terms as upstream License: Apache-2.0 Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at . https://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. Comment: On Debian systems, the complete text of the Apache version 2.0 license can be found in "/usr/share/common-licenses/Apache-2.0". | |
| control file for sigstore-go-dbgsym_0.6.2-1_amd64.deb (click to toggle) | |
|---|---|
| Package: | sigstore-go-dbgsym |
| Source: | sigstore-go |
| Version: | 0.6.2-1 |
| Auto-Built-Package: | debug-symbols |
| Architecture: | amd64 |
| Maintainer: | Debian Go Packaging Team <team+pkg-go@tracker.debian.org> |
| Installed-Size: | 25379 |
| Depends: | sigstore-go (=0.6.2-1) |
| Section: | debug |
| Priority: | optional |
| Description: | debug symbols for sigstore-go |
| Build-Ids: | 203f351d54173429eee1ad9ce0f61a01fcf4a6b4 646474b8a0132c8c073d5db06569abe39bf4a44b 822e4215e3bc6031f5f0282d299a913ce7f4c26a 8a29f7cfb8a1921ae9d8f617f3559ed038da1968 |
| contents of sigstore-go-dbgsym_0.6.2-1_amd64.deb (click to toggle) | |
|---|---|
drwxr-xr-x root/root 0 2024-10-22 22:40 ./ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/lib/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/lib/debug/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/lib/debug/.build-id/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/lib/debug/.build-id/20/ -rw-r--r-- root/root 5752256 2024-10-22 22:40 ./usr/lib/debug/.build-id/20/3f351d54173429eee1ad9ce0f61a01fcf4a6b4.debug drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/lib/debug/.build-id/64/ -rw-r--r-- root/root 7347912 2024-10-22 22:40 ./usr/lib/debug/.build-id/64/6474b8a0132c8c073d5db06569abe39bf4a44b.debug drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/lib/debug/.build-id/82/ -rw-r--r-- root/root 7335808 2024-10-22 22:40 ./usr/lib/debug/.build-id/82/2e4215e3bc6031f5f0282d299a913ce7f4c26a.debug drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/lib/debug/.build-id/8a/ -rw-r--r-- root/root 5536968 2024-10-22 22:40 ./usr/lib/debug/.build-id/8a/29f7cfb8a1921ae9d8f617f3559ed038da1968.debug drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/ drwxr-xr-x root/root 0 2024-10-22 22:40 ./usr/share/doc/ lrwxrwxrwx root/root 0 2024-10-22 22:40 ./usr/share/doc/sigstore-go-dbgsym -> sigstore-go | |
| copyright of sigstore-go-dbgsym_0.6.2-1_amd64.deb (click to toggle) | |
|---|---|
WARNING: No copyright found, please check package manually. | |
Timestamp: 25.10.2024 / 15:12:34 (UTC)