Class: Google::Cloud::ConfidentialComputing::V1::ContainerImageSignature
- Inherits:
-
Object
- Object
- Google::Cloud::ConfidentialComputing::V1::ContainerImageSignature
- Extended by:
- Protobuf::MessageExts::ClassMethods
- Includes:
- Protobuf::MessageExts
- Defined in:
- proto_docs/google/cloud/confidentialcomputing/v1/service.rb
Overview
ContainerImageSignature holds necessary metadata to verify a container image signature.
Instance Attribute Summary collapse
-
#payload ⇒ ::String
Optional.
-
#public_key ⇒ ::String
Optional.
-
#sig_alg ⇒ ::Google::Cloud::ConfidentialComputing::V1::SigningAlgorithm
Optional.
-
#signature ⇒ ::String
Optional.
Instance Attribute Details
#payload ⇒ ::String
Returns Optional. The binary signature payload following the SimpleSigning format https://github.com/sigstore/cosign/blob/main/specs/SIGNATURE_SPEC.md#simple-signing. This payload includes the container image digest.
311 312 313 314 |
# File 'proto_docs/google/cloud/confidentialcomputing/v1/service.rb', line 311 class ContainerImageSignature include ::Google::Protobuf::MessageExts extend ::Google::Protobuf::MessageExts::ClassMethods end |
#public_key ⇒ ::String
Returns Optional. Reserved for future use.
311 312 313 314 |
# File 'proto_docs/google/cloud/confidentialcomputing/v1/service.rb', line 311 class ContainerImageSignature include ::Google::Protobuf::MessageExts extend ::Google::Protobuf::MessageExts::ClassMethods end |
#sig_alg ⇒ ::Google::Cloud::ConfidentialComputing::V1::SigningAlgorithm
Returns Optional. Reserved for future use.
311 312 313 314 |
# File 'proto_docs/google/cloud/confidentialcomputing/v1/service.rb', line 311 class ContainerImageSignature include ::Google::Protobuf::MessageExts extend ::Google::Protobuf::MessageExts::ClassMethods end |
#signature ⇒ ::String
Returns Optional. A signature over the payload. The container image digest is incorporated into the signature as follows:
- Generate a SimpleSigning format payload that includes the container image digest.
- Generate a signature over SHA256 digest of the payload.
The signature generation process can be represented as follows:
Sign(sha256(SimpleSigningPayload(sha256(Image Manifest))))
.
311 312 313 314 |
# File 'proto_docs/google/cloud/confidentialcomputing/v1/service.rb', line 311 class ContainerImageSignature include ::Google::Protobuf::MessageExts extend ::Google::Protobuf::MessageExts::ClassMethods end |