Merge pull request #193 from saschagrunert/sign-recursive

Add `sign.Options.Recursive` config

sign/options.go

@@ -78,6 +78,10 @@ type Options struct {
 	// MaxCacheItems is the maximumg amount of items the internal caches can hold.
 	// Defaults to 10000.
 	MaxCacheItems uint64
+
+	// If a multi-arch image is specified, additionally sign each discrete image.
+	// Defaults to false.
+	Recursive bool
 }
 
 // Default returns a default Options instance.

sign/sign.go

@@ -128,6 +128,7 @@ func (s *Signer) SignImageWithOptions(options *Options, reference string) (objec
 	if err := options.verifySignOptions(); err != nil {
 		return nil, fmt.Errorf("checking signing options: %w", err)
 	}
+	s.log().Debugf("Using options: %+v", options)
 
 	resetFn, err := s.enableExperimental()
 	if err != nil {
@@ -175,7 +176,7 @@ func (s *Signer) SignImageWithOptions(options *Options, reference string) (objec
 	if err := s.impl.SignImageInternal(
 		options.ToCosignRootOptions(), ko, regOpts, options.Annotations,
 		images, "", options.AttachSignature, options.OutputSignaturePath,
-		options.OutputCertificatePath, "", true, false, "", false,
+		options.OutputCertificatePath, "", true, options.Recursive, "", false,
 	); err != nil {
 		return nil, fmt.Errorf("sign reference: %s: %w", reference, err)
 	}