mirror of
https://github.com/goharbor/harbor.git
synced 2024-11-01 08:09:59 +01:00
37 lines
1.5 KiB
Plaintext
37 lines
1.5 KiB
Plaintext
# Copyright Project Harbor Authors
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License
|
|
|
|
*** Settings ***
|
|
Documentation This resource provides helper functions for docker operations
|
|
Library OperatingSystem
|
|
Library Process
|
|
|
|
*** Keywords ***
|
|
Cosign Generate Key Pair
|
|
Remove Files cosign.key cosign.pub
|
|
Wait Unitl Command Success cosign generate-key-pair
|
|
|
|
Cosign Sign
|
|
[Arguments] ${artifact}
|
|
Wait Unitl Command Success cosign sign -y --allow-insecure-registry --key cosign.key ${artifact}
|
|
|
|
Cosign Verify
|
|
[Arguments] ${artifact} ${signed}
|
|
Run Keyword If ${signed}==${true} Wait Unitl Command Success cosign verify --key cosign.pub ${artifact}
|
|
... ELSE Command Should be Failed cosign verify --key cosign.pub ${artifact}
|
|
|
|
Cosign Push Sbom
|
|
[Arguments] ${artifact} ${sbom_path}=${files_directory}/sbom_test.json ${type}=spdx
|
|
Wait Unitl Command Success cosign attach sbom --allow-insecure-registry --registry-referrers-mode oci-1-1 --type ${type} --sbom ${sbom_path} ${artifact}
|