├── .github ├── release-drafter.yml └── workflows │ ├── open-release-pr.yml │ ├── release-drafter.yml │ ├── release-tag.yml │ ├── release.yml │ └── test.yml ├── .gitignore ├── CODEOWNERS ├── CONTRIBUTING.md ├── Cargo.lock ├── Cargo.toml ├── LICENSE ├── Makefile ├── README.md ├── artifacthub-repo.yml ├── e2e.bats ├── hub.yml ├── metadata.yml ├── questions-ui.yml ├── renovate.json ├── src ├── lib.rs └── settings │ ├── certificate.rs │ ├── github_actions.rs │ ├── keyless.rs │ ├── keyless_prefix.rs │ ├── mod.rs │ ├── pub_keys.rs │ └── validation_helpers.rs └── test_data ├── certificate-signing ├── .gitignore ├── Makefile ├── README.md ├── ca.json ├── cfssl.json ├── intermediate-ca.json ├── sunlight.json ├── user-1.json └── user-2.json ├── cronjob_creation_signed.json ├── cronjob_creation_unsigned.json ├── daemonset_creation_signed.json ├── daemonset_creation_unsigned.json ├── deployment_creation_signed.json ├── deployment_creation_unsigned.json ├── job_creation_signed.json ├── job_creation_unsigned.json ├── pod_creation_signed.json ├── pod_creation_signed_with_certificate.json ├── pod_creation_signed_with_keyless_mode.json ├── pod_creation_unsigned.json ├── pod_creation_with_digest.json ├── pod_creation_with_init_container.json ├── replicaset_creation_signed.json ├── replicaset_creation_unsigned.json ├── replicationcontroller_creation_signed.json ├── replicationcontroller_creation_unsigned.json ├── settings-cert-verification-wrong-cert-chain.yaml ├── settings-keyless-signing-wrong-subject.yaml ├── settings-keyless-signing.yaml ├── settings-mutation-disabled.yaml ├── settings-mutation-enabled.yaml ├── settings-pod_signed_with_cert_and_rekor.yaml ├── statefulset_creation_signed.json └── statefulset_creation_unsigned.json /.github/release-drafter.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/.github/release-drafter.yml -------------------------------------------------------------------------------- /.github/workflows/open-release-pr.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/.github/workflows/open-release-pr.yml -------------------------------------------------------------------------------- /.github/workflows/release-drafter.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/.github/workflows/release-drafter.yml -------------------------------------------------------------------------------- /.github/workflows/release-tag.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/.github/workflows/release-tag.yml -------------------------------------------------------------------------------- /.github/workflows/release.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/.github/workflows/release.yml -------------------------------------------------------------------------------- /.github/workflows/test.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/.github/workflows/test.yml -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/.gitignore -------------------------------------------------------------------------------- /CODEOWNERS: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/CODEOWNERS -------------------------------------------------------------------------------- /CONTRIBUTING.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/CONTRIBUTING.md -------------------------------------------------------------------------------- /Cargo.lock: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/Cargo.lock -------------------------------------------------------------------------------- /Cargo.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/Cargo.toml -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/LICENSE -------------------------------------------------------------------------------- /Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/Makefile -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/README.md -------------------------------------------------------------------------------- /artifacthub-repo.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/artifacthub-repo.yml -------------------------------------------------------------------------------- /e2e.bats: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/e2e.bats -------------------------------------------------------------------------------- /hub.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/hub.yml -------------------------------------------------------------------------------- /metadata.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/metadata.yml -------------------------------------------------------------------------------- /questions-ui.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/questions-ui.yml -------------------------------------------------------------------------------- /renovate.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/renovate.json -------------------------------------------------------------------------------- /src/lib.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/src/lib.rs -------------------------------------------------------------------------------- /src/settings/certificate.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/src/settings/certificate.rs -------------------------------------------------------------------------------- /src/settings/github_actions.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/src/settings/github_actions.rs -------------------------------------------------------------------------------- /src/settings/keyless.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/src/settings/keyless.rs -------------------------------------------------------------------------------- /src/settings/keyless_prefix.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/src/settings/keyless_prefix.rs -------------------------------------------------------------------------------- /src/settings/mod.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/src/settings/mod.rs -------------------------------------------------------------------------------- /src/settings/pub_keys.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/src/settings/pub_keys.rs -------------------------------------------------------------------------------- /src/settings/validation_helpers.rs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/src/settings/validation_helpers.rs -------------------------------------------------------------------------------- /test_data/certificate-signing/.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/certificate-signing/.gitignore -------------------------------------------------------------------------------- /test_data/certificate-signing/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/certificate-signing/Makefile -------------------------------------------------------------------------------- /test_data/certificate-signing/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/certificate-signing/README.md -------------------------------------------------------------------------------- /test_data/certificate-signing/ca.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/certificate-signing/ca.json -------------------------------------------------------------------------------- /test_data/certificate-signing/cfssl.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/certificate-signing/cfssl.json -------------------------------------------------------------------------------- /test_data/certificate-signing/intermediate-ca.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/certificate-signing/intermediate-ca.json -------------------------------------------------------------------------------- /test_data/certificate-signing/sunlight.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/certificate-signing/sunlight.json -------------------------------------------------------------------------------- /test_data/certificate-signing/user-1.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/certificate-signing/user-1.json -------------------------------------------------------------------------------- /test_data/certificate-signing/user-2.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/certificate-signing/user-2.json -------------------------------------------------------------------------------- /test_data/cronjob_creation_signed.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/cronjob_creation_signed.json -------------------------------------------------------------------------------- /test_data/cronjob_creation_unsigned.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/cronjob_creation_unsigned.json -------------------------------------------------------------------------------- /test_data/daemonset_creation_signed.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/daemonset_creation_signed.json -------------------------------------------------------------------------------- /test_data/daemonset_creation_unsigned.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/daemonset_creation_unsigned.json -------------------------------------------------------------------------------- /test_data/deployment_creation_signed.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/deployment_creation_signed.json -------------------------------------------------------------------------------- /test_data/deployment_creation_unsigned.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/deployment_creation_unsigned.json -------------------------------------------------------------------------------- /test_data/job_creation_signed.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/job_creation_signed.json -------------------------------------------------------------------------------- /test_data/job_creation_unsigned.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/job_creation_unsigned.json -------------------------------------------------------------------------------- /test_data/pod_creation_signed.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/pod_creation_signed.json -------------------------------------------------------------------------------- /test_data/pod_creation_signed_with_certificate.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/pod_creation_signed_with_certificate.json -------------------------------------------------------------------------------- /test_data/pod_creation_signed_with_keyless_mode.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/pod_creation_signed_with_keyless_mode.json -------------------------------------------------------------------------------- /test_data/pod_creation_unsigned.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/pod_creation_unsigned.json -------------------------------------------------------------------------------- /test_data/pod_creation_with_digest.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/pod_creation_with_digest.json -------------------------------------------------------------------------------- /test_data/pod_creation_with_init_container.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/pod_creation_with_init_container.json -------------------------------------------------------------------------------- /test_data/replicaset_creation_signed.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/replicaset_creation_signed.json -------------------------------------------------------------------------------- /test_data/replicaset_creation_unsigned.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/replicaset_creation_unsigned.json -------------------------------------------------------------------------------- /test_data/replicationcontroller_creation_signed.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/replicationcontroller_creation_signed.json -------------------------------------------------------------------------------- /test_data/replicationcontroller_creation_unsigned.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/replicationcontroller_creation_unsigned.json -------------------------------------------------------------------------------- /test_data/settings-cert-verification-wrong-cert-chain.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/settings-cert-verification-wrong-cert-chain.yaml -------------------------------------------------------------------------------- /test_data/settings-keyless-signing-wrong-subject.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/settings-keyless-signing-wrong-subject.yaml -------------------------------------------------------------------------------- /test_data/settings-keyless-signing.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/settings-keyless-signing.yaml -------------------------------------------------------------------------------- /test_data/settings-mutation-disabled.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/settings-mutation-disabled.yaml -------------------------------------------------------------------------------- /test_data/settings-mutation-enabled.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/settings-mutation-enabled.yaml -------------------------------------------------------------------------------- /test_data/settings-pod_signed_with_cert_and_rekor.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/settings-pod_signed_with_cert_and_rekor.yaml -------------------------------------------------------------------------------- /test_data/statefulset_creation_signed.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/statefulset_creation_signed.json -------------------------------------------------------------------------------- /test_data/statefulset_creation_unsigned.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kubewarden/verify-image-signatures/HEAD/test_data/statefulset_creation_unsigned.json --------------------------------------------------------------------------------