Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Cosign Provider
  3. API Docs
  4. Attest
cosign 0.0.25 published on Tuesday, Apr 15, 2025 by chainguard-dev
chainguard-dev/terraform-provider-cosign

cosign.Attest

Explore with Pulumi AI

cosign 0.0.25 published on Tuesday, Apr 15, 2025 by chainguard-dev
chainguard-dev/terraform-provider-cosign

This attests the provided image digest with cosign.

Create Attest Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Attest(name: string, args: AttestArgs, opts?: CustomResourceOptions);
@overload
def Attest(resource_name: str,
           args: AttestArgs,
           opts: Optional[ResourceOptions] = None)

@overload
def Attest(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           image: Optional[str] = None,
           conflict: Optional[str] = None,
           fulcio_url: Optional[str] = None,
           predicate: Optional[str] = None,
           predicate_files: Optional[Sequence[AttestPredicateFileArgs]] = None,
           predicate_type: Optional[str] = None,
           predicates: Optional[Sequence[AttestPredicateArgs]] = None,
           rekor_url: Optional[str] = None)
func NewAttest(ctx *Context, name string, args AttestArgs, opts ...ResourceOption) (*Attest, error)
public Attest(string name, AttestArgs args, CustomResourceOptions? opts = null)
public Attest(String name, AttestArgs args)
public Attest(String name, AttestArgs args, CustomResourceOptions options)

type: cosign:Attest
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. AttestArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. AttestArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. AttestArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. AttestArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. AttestArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var attestResource = new Cosign.Attest("attestResource", new()
{
    Image = "string",
    Conflict = "string",
    FulcioUrl = "string",
    Predicates = new[]
    {
        new Cosign.Inputs.AttestPredicateArgs
        {
            Type = "string",
            Files = new[]
            {
                new Cosign.Inputs.AttestPredicateFileArgs
                {
                    Path = "string",
                    Sha256 = "string",
                },
            },
            Json = "string",
        },
    },
    RekorUrl = "string",
});
Copy
example, err := cosign.NewAttest(ctx, "attestResource", &cosign.AttestArgs{
Image: pulumi.String("string"),
Conflict: pulumi.String("string"),
FulcioUrl: pulumi.String("string"),
Predicates: .AttestPredicateArray{
&.AttestPredicateArgs{
Type: pulumi.String("string"),
Files: .AttestPredicateFileArray{
&.AttestPredicateFileArgs{
Path: pulumi.String("string"),
Sha256: pulumi.String("string"),
},
},
Json: pulumi.String("string"),
},
},
RekorUrl: pulumi.String("string"),
})
Copy
var attestResource = new Attest("attestResource", AttestArgs.builder()
    .image("string")
    .conflict("string")
    .fulcioUrl("string")
    .predicates(AttestPredicateArgs.builder()
        .type("string")
        .files(AttestPredicateFileArgs.builder()
            .path("string")
            .sha256("string")
            .build())
        .json("string")
        .build())
    .rekorUrl("string")
    .build());
Copy
attest_resource = cosign.Attest("attestResource",
    image="string",
    conflict="string",
    fulcio_url="string",
    predicates=[{
        "type": "string",
        "files": [{
            "path": "string",
            "sha256": "string",
        }],
        "json": "string",
    }],
    rekor_url="string")
Copy
const attestResource = new cosign.Attest("attestResource", {
    image: "string",
    conflict: "string",
    fulcioUrl: "string",
    predicates: [{
        type: "string",
        files: [{
            path: "string",
            sha256: "string",
        }],
        json: "string",
    }],
    rekorUrl: "string",
});
Copy
type: cosign:Attest
properties:
    conflict: string
    fulcioUrl: string
    image: string
    predicates:
        - files:
            - path: string
              sha256: string
          json: string
          type: string
    rekorUrl: string
Copy

Attest Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Attest resource accepts the following input properties:

Image This property is required. string
The digest of the container image to attest.
Conflict string
How to handle conflicting predicate values
FulcioUrl string
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
Predicate string
The JSON body of the in-toto predicate's claim.

Deprecated: Deprecated

PredicateFiles List<AttestPredicateFile>
The path and sha256 hex of the predicate to attest.

Deprecated: Deprecated

PredicateType string
The in-toto predicate type of the claim being attested.

Deprecated: Deprecated

Predicates List<AttestPredicate>
The path and sha256 hex of the predicate to attest.
RekorUrl string
Address of rekor transparency log server (default https://rekor.sigstore.dev).
Image This property is required. string
The digest of the container image to attest.
Conflict string
How to handle conflicting predicate values
FulcioUrl string
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
Predicate string
The JSON body of the in-toto predicate's claim.

Deprecated: Deprecated

PredicateFiles []AttestPredicateFileArgs
The path and sha256 hex of the predicate to attest.

Deprecated: Deprecated

PredicateType string
The in-toto predicate type of the claim being attested.

Deprecated: Deprecated

Predicates []AttestPredicateArgs
The path and sha256 hex of the predicate to attest.
RekorUrl string
Address of rekor transparency log server (default https://rekor.sigstore.dev).
image This property is required. String
The digest of the container image to attest.
conflict String
How to handle conflicting predicate values
fulcioUrl String
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
predicate String
The JSON body of the in-toto predicate's claim.

Deprecated: Deprecated

predicateFiles List<AttestPredicateFile>
The path and sha256 hex of the predicate to attest.

Deprecated: Deprecated

predicateType String
The in-toto predicate type of the claim being attested.

Deprecated: Deprecated

predicates List<AttestPredicate>
The path and sha256 hex of the predicate to attest.
rekorUrl String
Address of rekor transparency log server (default https://rekor.sigstore.dev).
image This property is required. string
The digest of the container image to attest.
conflict string
How to handle conflicting predicate values
fulcioUrl string
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
predicate string
The JSON body of the in-toto predicate's claim.

Deprecated: Deprecated

predicateFiles AttestPredicateFile[]
The path and sha256 hex of the predicate to attest.

Deprecated: Deprecated

predicateType string
The in-toto predicate type of the claim being attested.

Deprecated: Deprecated

predicates AttestPredicate[]
The path and sha256 hex of the predicate to attest.
rekorUrl string
Address of rekor transparency log server (default https://rekor.sigstore.dev).
image This property is required. str
The digest of the container image to attest.
conflict str
How to handle conflicting predicate values
fulcio_url str
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
predicate str
The JSON body of the in-toto predicate's claim.

Deprecated: Deprecated

predicate_files Sequence[AttestPredicateFileArgs]
The path and sha256 hex of the predicate to attest.

Deprecated: Deprecated

predicate_type str
The in-toto predicate type of the claim being attested.

Deprecated: Deprecated

predicates Sequence[AttestPredicateArgs]
The path and sha256 hex of the predicate to attest.
rekor_url str
Address of rekor transparency log server (default https://rekor.sigstore.dev).
image This property is required. String
The digest of the container image to attest.
conflict String
How to handle conflicting predicate values
fulcioUrl String
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
predicate String
The JSON body of the in-toto predicate's claim.

Deprecated: Deprecated

predicateFiles List<Property Map>
The path and sha256 hex of the predicate to attest.

Deprecated: Deprecated

predicateType String
The in-toto predicate type of the claim being attested.

Deprecated: Deprecated

predicates List<Property Map>
The path and sha256 hex of the predicate to attest.
rekorUrl String
Address of rekor transparency log server (default https://rekor.sigstore.dev).

Outputs

All input properties are implicitly available as output properties. Additionally, the Attest resource produces the following output properties:

AttestedRef string
This always matches the input digest, but is a convenience for composition.
Id string
The provider-assigned unique ID for this managed resource.
AttestedRef string
This always matches the input digest, but is a convenience for composition.
Id string
The provider-assigned unique ID for this managed resource.
attestedRef String
This always matches the input digest, but is a convenience for composition.
id String
The provider-assigned unique ID for this managed resource.
attestedRef string
This always matches the input digest, but is a convenience for composition.
id string
The provider-assigned unique ID for this managed resource.
attested_ref str
This always matches the input digest, but is a convenience for composition.
id str
The provider-assigned unique ID for this managed resource.
attestedRef String
This always matches the input digest, but is a convenience for composition.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing Attest Resource

Get an existing Attest resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: AttestState, opts?: CustomResourceOptions): Attest
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        attested_ref: Optional[str] = None,
        conflict: Optional[str] = None,
        fulcio_url: Optional[str] = None,
        image: Optional[str] = None,
        predicate: Optional[str] = None,
        predicate_files: Optional[Sequence[AttestPredicateFileArgs]] = None,
        predicate_type: Optional[str] = None,
        predicates: Optional[Sequence[AttestPredicateArgs]] = None,
        rekor_url: Optional[str] = None) -> Attest
func GetAttest(ctx *Context, name string, id IDInput, state *AttestState, opts ...ResourceOption) (*Attest, error)
public static Attest Get(string name, Input<string> id, AttestState? state, CustomResourceOptions? opts = null)
public static Attest get(String name, Output<String> id, AttestState state, CustomResourceOptions options)
resources:  _:    type: cosign:Attest    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AttestedRef string
This always matches the input digest, but is a convenience for composition.
Conflict string
How to handle conflicting predicate values
FulcioUrl string
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
Image string
The digest of the container image to attest.
Predicate string
The JSON body of the in-toto predicate's claim.

Deprecated: Deprecated

PredicateFiles List<AttestPredicateFile>
The path and sha256 hex of the predicate to attest.

Deprecated: Deprecated

PredicateType string
The in-toto predicate type of the claim being attested.

Deprecated: Deprecated

Predicates List<AttestPredicate>
The path and sha256 hex of the predicate to attest.
RekorUrl string
Address of rekor transparency log server (default https://rekor.sigstore.dev).
AttestedRef string
This always matches the input digest, but is a convenience for composition.
Conflict string
How to handle conflicting predicate values
FulcioUrl string
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
Image string
The digest of the container image to attest.
Predicate string
The JSON body of the in-toto predicate's claim.

Deprecated: Deprecated

PredicateFiles []AttestPredicateFileArgs
The path and sha256 hex of the predicate to attest.

Deprecated: Deprecated

PredicateType string
The in-toto predicate type of the claim being attested.

Deprecated: Deprecated

Predicates []AttestPredicateArgs
The path and sha256 hex of the predicate to attest.
RekorUrl string
Address of rekor transparency log server (default https://rekor.sigstore.dev).
attestedRef String
This always matches the input digest, but is a convenience for composition.
conflict String
How to handle conflicting predicate values
fulcioUrl String
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
image String
The digest of the container image to attest.
predicate String
The JSON body of the in-toto predicate's claim.

Deprecated: Deprecated

predicateFiles List<AttestPredicateFile>
The path and sha256 hex of the predicate to attest.

Deprecated: Deprecated

predicateType String
The in-toto predicate type of the claim being attested.

Deprecated: Deprecated

predicates List<AttestPredicate>
The path and sha256 hex of the predicate to attest.
rekorUrl String
Address of rekor transparency log server (default https://rekor.sigstore.dev).
attestedRef string
This always matches the input digest, but is a convenience for composition.
conflict string
How to handle conflicting predicate values
fulcioUrl string
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
image string
The digest of the container image to attest.
predicate string
The JSON body of the in-toto predicate's claim.

Deprecated: Deprecated

predicateFiles AttestPredicateFile[]
The path and sha256 hex of the predicate to attest.

Deprecated: Deprecated

predicateType string
The in-toto predicate type of the claim being attested.

Deprecated: Deprecated

predicates AttestPredicate[]
The path and sha256 hex of the predicate to attest.
rekorUrl string
Address of rekor transparency log server (default https://rekor.sigstore.dev).
attested_ref str
This always matches the input digest, but is a convenience for composition.
conflict str
How to handle conflicting predicate values
fulcio_url str
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
image str
The digest of the container image to attest.
predicate str
The JSON body of the in-toto predicate's claim.

Deprecated: Deprecated

predicate_files Sequence[AttestPredicateFileArgs]
The path and sha256 hex of the predicate to attest.

Deprecated: Deprecated

predicate_type str
The in-toto predicate type of the claim being attested.

Deprecated: Deprecated

predicates Sequence[AttestPredicateArgs]
The path and sha256 hex of the predicate to attest.
rekor_url str
Address of rekor transparency log server (default https://rekor.sigstore.dev).
attestedRef String
This always matches the input digest, but is a convenience for composition.
conflict String
How to handle conflicting predicate values
fulcioUrl String
Address of sigstore PKI server (default https://fulcio.sigstore.dev).
image String
The digest of the container image to attest.
predicate String
The JSON body of the in-toto predicate's claim.

Deprecated: Deprecated

predicateFiles List<Property Map>
The path and sha256 hex of the predicate to attest.

Deprecated: Deprecated

predicateType String
The in-toto predicate type of the claim being attested.

Deprecated: Deprecated

predicates List<Property Map>
The path and sha256 hex of the predicate to attest.
rekorUrl String
Address of rekor transparency log server (default https://rekor.sigstore.dev).

Supporting Types

AttestPredicate
, AttestPredicateArgs

Type This property is required. string
The in-toto predicate type of the claim being attested.
Files List<AttestPredicateFile>
The path and sha256 hex of the predicate to attest.
Json string
The JSON body of the in-toto predicate's claim.
Type This property is required. string
The in-toto predicate type of the claim being attested.
Files []AttestPredicateFile
The path and sha256 hex of the predicate to attest.
Json string
The JSON body of the in-toto predicate's claim.
type This property is required. String
The in-toto predicate type of the claim being attested.
files List<AttestPredicateFile>
The path and sha256 hex of the predicate to attest.
json String
The JSON body of the in-toto predicate's claim.
type This property is required. string
The in-toto predicate type of the claim being attested.
files AttestPredicateFile[]
The path and sha256 hex of the predicate to attest.
json string
The JSON body of the in-toto predicate's claim.
type This property is required. str
The in-toto predicate type of the claim being attested.
files Sequence[AttestPredicateFile]
The path and sha256 hex of the predicate to attest.
json str
The JSON body of the in-toto predicate's claim.
type This property is required. String
The in-toto predicate type of the claim being attested.
files List<Property Map>
The path and sha256 hex of the predicate to attest.
json String
The JSON body of the in-toto predicate's claim.

AttestPredicateFile
, AttestPredicateFileArgs

Path string
The path to a file containing the predicate to attest.
Sha256 string
The sha256 hex hash of the predicate body.
Path string
The path to a file containing the predicate to attest.
Sha256 string
The sha256 hex hash of the predicate body.
path String
The path to a file containing the predicate to attest.
sha256 String
The sha256 hex hash of the predicate body.
path string
The path to a file containing the predicate to attest.
sha256 string
The sha256 hex hash of the predicate body.
path str
The path to a file containing the predicate to attest.
sha256 str
The sha256 hex hash of the predicate body.
path String
The path to a file containing the predicate to attest.
sha256 String
The sha256 hex hash of the predicate body.

Package Details

Repository
cosign chainguard-dev/terraform-provider-cosign
License
Notes
This Pulumi package is based on the cosign Terraform Provider.
cosign 0.0.25 published on Tuesday, Apr 15, 2025 by chainguard-dev
chainguard-dev/terraform-provider-cosign