in pkg/container/attestations.go [56:75]
func VerifyAndGetAttestations(ctx context.Context, resourceURI string) ([]oci.Signature, error) {
// Get cosign.VerifyImageAttestations options
opts, err := getCosignOptions(ctx)
if err != nil {
return nil, err
}
// Verify and return attestations
resourceRef, err := crname.ParseReference(resourceURI)
if err != nil {
return nil, err
}
atts, _, err := cosign.VerifyImageAttestations(ctx, resourceRef, opts)
if err != nil {
return nil, err
}
return atts, err
}