docs: verify-attestation cue and rego policy doc (#1362)

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
sigstore · Jan 27, 2022 · e1e0153 · e1e0153
1 parent 21e6b80
commit e1e0153
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 1 deletion.
diff --git a/cmd/cosign/cli/verify.go b/cmd/cosign/cli/verify.go
@@ -153,7 +153,13 @@ against the transparency log.`,
   cosign verify-attestation --key gitlab://[OWNER]/[PROJECT_NAME] <IMAGE>
 
   # verify image with public key stored in GitLab with project id
-  cosign verify-attestation --key gitlab://[PROJECT_ID] <IMAGE>`,
+  cosign verify-attestation --key gitlab://[PROJECT_ID] <IMAGE>
+
+  # verify image with public key and validate attestation based on Rego policy
+  cosign verify-attestation --key cosign.pub --type <PREDICATE_TYPE> --policy <REGO_POLICY> <IMAGE>
+
+  # verify image with public key and validate attestation based on CUE policy
+  cosign verify-attestation --key cosign.pub --type <PREDICATE_TYPE> --policy <CUE_POLICY> <IMAGE>`,
 
 		Args: cobra.MinimumNArgs(1),
 		RunE: func(cmd *cobra.Command, args []string) error {

diff --git a/doc/cosign_verify-attestation.md b/doc/cosign_verify-attestation.md