diff --git a/cmd/cosign/cli/verify.go b/cmd/cosign/cli/verify.go index 33288324fcc..e518aada94b 100644 --- a/cmd/cosign/cli/verify.go +++ b/cmd/cosign/cli/verify.go @@ -153,7 +153,13 @@ against the transparency log.`, cosign verify-attestation --key gitlab://[OWNER]/[PROJECT_NAME] # verify image with public key stored in GitLab with project id - cosign verify-attestation --key gitlab://[PROJECT_ID] `, + cosign verify-attestation --key gitlab://[PROJECT_ID] + + # verify image with public key and validate attestation based on Rego policy + cosign verify-attestation --key cosign.pub --type --policy + + # verify image with public key and validate attestation based on CUE policy + cosign verify-attestation --key cosign.pub --type --policy `, Args: cobra.MinimumNArgs(1), RunE: func(cmd *cobra.Command, args []string) error { diff --git a/doc/cosign_verify-attestation.md b/doc/cosign_verify-attestation.md index a381f8b607f..a3d40a9022b 100644 --- a/doc/cosign_verify-attestation.md +++ b/doc/cosign_verify-attestation.md @@ -48,6 +48,12 @@ cosign verify-attestation [flags] # verify image with public key stored in GitLab with project id cosign verify-attestation --key gitlab://[PROJECT_ID] + + # verify image with public key and validate attestation based on Rego policy + cosign verify-attestation --key cosign.pub --type --policy + + # verify image with public key and validate attestation based on CUE policy + cosign verify-attestation --key cosign.pub --type --policy ``` ### Options