1. Packages
  2. Cosign Provider
  3. API Docs
  4. Sign
cosign 0.0.24 published on Tuesday, Apr 15, 2025 by chainguard-dev

cosign.Sign

Explore with Pulumi AI

This signs the provided image digest with cosign.

Create Sign Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Sign(name: string, args: SignArgs, opts?: CustomResourceOptions);
@overload
def Sign(resource_name: str,
         args: SignArgs,
         opts: Optional[ResourceOptions] = None)

@overload
def Sign(resource_name: str,
         opts: Optional[ResourceOptions] = None,
         image: Optional[str] = None,
         conflict: Optional[str] = None,
         fulcio_url: Optional[str] = None,
         rekor_url: Optional[str] = None)
func NewSign(ctx *Context, name string, args SignArgs, opts ...ResourceOption) (*Sign, error)
public Sign(string name, SignArgs args, CustomResourceOptions? opts = null)
public Sign(String name, SignArgs args)
public Sign(String name, SignArgs args, CustomResourceOptions options)
type: cosign:Sign
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. SignArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. SignArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. SignArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. SignArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. SignArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var signResource = new Cosign.Sign("signResource", new()
{
    Image = "string",
    Conflict = "string",
    FulcioUrl = "string",
    RekorUrl = "string",
});
Copy
example, err := cosign.NewSign(ctx, "signResource", &cosign.SignArgs{
Image: pulumi.String("string"),
Conflict: pulumi.String("string"),
FulcioUrl: pulumi.String("string"),
RekorUrl: pulumi.String("string"),
})
Copy
var signResource = new Sign("signResource", SignArgs.builder()
    .image("string")
    .conflict("string")
    .fulcioUrl("string")
    .rekorUrl("string")
    .build());
Copy
sign_resource = cosign.Sign("signResource",
    image="string",
    conflict="string",
    fulcio_url="string",
    rekor_url="string")
Copy
const signResource = new cosign.Sign("signResource", {
    image: "string",
    conflict: "string",
    fulcioUrl: "string",
    rekorUrl: "string",
});
Copy
type: cosign:Sign
properties:
    conflict: string
    fulcioUrl: string
    image: string
    rekorUrl: string
Copy

Sign Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Sign resource accepts the following input properties:

Image This property is required. string
The digest of the container image to sign.
Conflict string
How to handle conflicting signature values
FulcioUrl string
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
RekorUrl string
Address of rekor transparency log server (default https://rekor.sigstore.dev).
Image This property is required. string
The digest of the container image to sign.
Conflict string
How to handle conflicting signature values
FulcioUrl string
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
RekorUrl string
Address of rekor transparency log server (default https://rekor.sigstore.dev).
image This property is required. String
The digest of the container image to sign.
conflict String
How to handle conflicting signature values
fulcioUrl String
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
rekorUrl String
Address of rekor transparency log server (default https://rekor.sigstore.dev).
image This property is required. string
The digest of the container image to sign.
conflict string
How to handle conflicting signature values
fulcioUrl string
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
rekorUrl string
Address of rekor transparency log server (default https://rekor.sigstore.dev).
image This property is required. str
The digest of the container image to sign.
conflict str
How to handle conflicting signature values
fulcio_url str
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
rekor_url str
Address of rekor transparency log server (default https://rekor.sigstore.dev).
image This property is required. String
The digest of the container image to sign.
conflict String
How to handle conflicting signature values
fulcioUrl String
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
rekorUrl String
Address of rekor transparency log server (default https://rekor.sigstore.dev).

Outputs

All input properties are implicitly available as output properties. Additionally, the Sign resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
SignedRef string
This always matches the input digest, but is a convenience for composition.
Id string
The provider-assigned unique ID for this managed resource.
SignedRef string
This always matches the input digest, but is a convenience for composition.
id String
The provider-assigned unique ID for this managed resource.
signedRef String
This always matches the input digest, but is a convenience for composition.
id string
The provider-assigned unique ID for this managed resource.
signedRef string
This always matches the input digest, but is a convenience for composition.
id str
The provider-assigned unique ID for this managed resource.
signed_ref str
This always matches the input digest, but is a convenience for composition.
id String
The provider-assigned unique ID for this managed resource.
signedRef String
This always matches the input digest, but is a convenience for composition.

Look up Existing Sign Resource

Get an existing Sign resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: SignState, opts?: CustomResourceOptions): Sign
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        conflict: Optional[str] = None,
        fulcio_url: Optional[str] = None,
        image: Optional[str] = None,
        rekor_url: Optional[str] = None,
        signed_ref: Optional[str] = None) -> Sign
func GetSign(ctx *Context, name string, id IDInput, state *SignState, opts ...ResourceOption) (*Sign, error)
public static Sign Get(string name, Input<string> id, SignState? state, CustomResourceOptions? opts = null)
public static Sign get(String name, Output<String> id, SignState state, CustomResourceOptions options)
resources:  _:    type: cosign:Sign    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Conflict string
How to handle conflicting signature values
FulcioUrl string
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
Image string
The digest of the container image to sign.
RekorUrl string
Address of rekor transparency log server (default https://rekor.sigstore.dev).
SignedRef string
This always matches the input digest, but is a convenience for composition.
Conflict string
How to handle conflicting signature values
FulcioUrl string
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
Image string
The digest of the container image to sign.
RekorUrl string
Address of rekor transparency log server (default https://rekor.sigstore.dev).
SignedRef string
This always matches the input digest, but is a convenience for composition.
conflict String
How to handle conflicting signature values
fulcioUrl String
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
image String
The digest of the container image to sign.
rekorUrl String
Address of rekor transparency log server (default https://rekor.sigstore.dev).
signedRef String
This always matches the input digest, but is a convenience for composition.
conflict string
How to handle conflicting signature values
fulcioUrl string
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
image string
The digest of the container image to sign.
rekorUrl string
Address of rekor transparency log server (default https://rekor.sigstore.dev).
signedRef string
This always matches the input digest, but is a convenience for composition.
conflict str
How to handle conflicting signature values
fulcio_url str
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
image str
The digest of the container image to sign.
rekor_url str
Address of rekor transparency log server (default https://rekor.sigstore.dev).
signed_ref str
This always matches the input digest, but is a convenience for composition.
conflict String
How to handle conflicting signature values
fulcioUrl String
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
image String
The digest of the container image to sign.
rekorUrl String
Address of rekor transparency log server (default https://rekor.sigstore.dev).
signedRef String
This always matches the input digest, but is a convenience for composition.

Package Details

Repository
cosign chainguard-dev/terraform-provider-cosign
License
Notes
This Pulumi package is based on the cosign Terraform Provider.