mirror of
https://github.com/kyverno/kyverno.git
synced 2024-12-14 11:57:48 +00:00
83 lines
2.4 KiB
Go
83 lines
2.4 KiB
Go
package notary
|
|
|
|
import (
|
|
"context"
|
|
"testing"
|
|
|
|
"github.com/google/go-containerregistry/pkg/name"
|
|
"github.com/google/go-containerregistry/pkg/v1/remote"
|
|
notationregistry "github.com/notaryproject/notation-go/registry"
|
|
ocispec "github.com/opencontainers/image-spec/specs-go/v1"
|
|
"gotest.tools/assert"
|
|
)
|
|
|
|
var (
|
|
imageRef = "ghcr.io/kyverno/test-verify-image:signed"
|
|
ctx = context.Background()
|
|
)
|
|
|
|
func TestResolve(t *testing.T) {
|
|
nameRef, err := name.ParseReference(imageRef)
|
|
assert.NilError(t, err)
|
|
repoDesc, err := remote.Head(nameRef)
|
|
assert.NilError(t, err)
|
|
|
|
ref, err := name.ParseReference(imageRef)
|
|
assert.NilError(t, err)
|
|
|
|
repositoryClient := NewRepository(nil, ref)
|
|
|
|
desc, err := repositoryClient.Resolve(ctx, repoDesc.Digest.String())
|
|
assert.NilError(t, err)
|
|
assert.Equal(t, desc.Digest.String(), "sha256:b31bfb4d0213f254d361e0079deaaebefa4f82ba7aa76ef82e90b4935ad5b105")
|
|
assert.Equal(t, desc.MediaType, "application/vnd.docker.distribution.manifest.v2+json")
|
|
}
|
|
|
|
func TestListSignatures(t *testing.T) {
|
|
nameRef, err := name.ParseReference(imageRef)
|
|
assert.NilError(t, err)
|
|
repoDesc, err := remote.Head(nameRef)
|
|
assert.NilError(t, err)
|
|
|
|
ociDesc := v1ToOciSpecDescriptor(*repoDesc)
|
|
assert.Equal(t, ociDesc.Digest.String(), repoDesc.Digest.String())
|
|
|
|
ref, err := name.ParseReference(imageRef)
|
|
assert.NilError(t, err)
|
|
|
|
repositoryClient := NewRepository(nil, ref)
|
|
fn := func(_ []ocispec.Descriptor) error {
|
|
return nil
|
|
}
|
|
|
|
err = repositoryClient.ListSignatures(ctx, ociDesc, fn)
|
|
assert.NilError(t, err)
|
|
}
|
|
|
|
func TestFetchSignatureBlob(t *testing.T) {
|
|
nameRef, err := name.ParseReference(imageRef)
|
|
assert.NilError(t, err)
|
|
repoDesc, err := remote.Head(nameRef)
|
|
assert.NilError(t, err)
|
|
|
|
ociDesc := v1ToOciSpecDescriptor(*repoDesc)
|
|
assert.Equal(t, ociDesc.Digest.String(), repoDesc.Digest.String())
|
|
|
|
ref, err := name.ParseReference(imageRef)
|
|
assert.NilError(t, err)
|
|
|
|
repositoryClient := NewRepository(nil, ref)
|
|
|
|
referrers, err := remote.Referrers(ref.Context().Digest(ociDesc.Digest.String()))
|
|
assert.NilError(t, err)
|
|
referrersDescs, err := referrers.IndexManifest()
|
|
assert.NilError(t, err)
|
|
|
|
for _, d := range referrersDescs.Manifests {
|
|
if d.ArtifactType == notationregistry.ArtifactTypeNotation {
|
|
_, desc, err := repositoryClient.FetchSignatureBlob(ctx, v1ToOciSpecDescriptor(d))
|
|
assert.NilError(t, err)
|
|
assert.Equal(t, desc.MediaType, "application/jose+json")
|
|
}
|
|
}
|
|
}
|