Package land.oras.policy

Interface SigstoreSignatureFetcher

Functional Interface:
This is a functional interface and can therefore be used as the assignment target for a lambda expression or method reference.
@NullMarked @FunctionalInterface public interface SigstoreSignatureFetcher
Supplies the raw signature artifacts attached to an image so that policy requirements can verify them without the land.oras.policy package depending on the registry implementation.

The registry adapts itself to this interface, fetching bundle blobs from the referrers attached to the image being evaluated.

  • Method Summary

    Modifier and Type
    Method
    Description
    List<byte[]>
    fetchBundle()
    Fetch the raw bytes of a bundle

  • Method Details

    • fetchBundle

      List<byte[]> fetchBundle()
      Fetch the raw bytes of a bundle
      Returns:
      the bundle blob bytes; empty if the image has no attached signatures.