Merge pull request #193 from saschagrunert/sign-recursive

Add `sign.Options.Recursive` config

sign/options.go

@@ -78,6 +78,10 @@ type Options struct {
  // MaxCacheItems is the maximumg amount of items the internal caches can hold.
  // Defaults to 10000.
  MaxCacheItems uint64
+
+ // If a multi-arch image is specified, additionally sign each discrete image.
+ // Defaults to false.
+ Recursive bool
 }
 
 // Default returns a default Options instance.

sign/sign.go

@@ -128,6 +128,7 @@ func (s *Signer) SignImageWithOptions(options *Options, reference string) (objec
  if err := options.verifySignOptions(); err != nil {
  return nil, fmt.Errorf("checking signing options: %w", err)
  }
+ s.log().Debugf("Using options: %+v", options)
 
  resetFn, err := s.enableExperimental()
  if err != nil {
@@ -175,7 +176,7 @@ func (s *Signer) SignImageWithOptions(options *Options, reference string) (objec
  if err := s.impl.SignImageInternal(
  options.ToCosignRootOptions(), ko, regOpts, options.Annotations,
  images, "", options.AttachSignature, options.OutputSignaturePath,
- options.OutputCertificatePath, "", true, false, "", false,
+ options.OutputCertificatePath, "", true, options.Recursive, "", false,
  ); err != nil {
  return nil, fmt.Errorf("sign reference: %s: %w", reference, err)
  }