Merge pull request #48 from puerco/upload-option

Make attaching image signature optional

sign/options.go

@@ -38,7 +38,12 @@ type Options struct {
 	// Defaults to 3 minutes
 	Timeout time.Duration
 
-	AllowInsecure         bool
+	AllowInsecure bool
+
+	// AttachSignature tells the signer to attach or not the new
+	// signature to its image
+	AttachSignature bool
+
 	OutputSignaturePath   string
 	OutputCertificatePath string
 	Annotations           map[string]interface{}
@@ -66,6 +71,7 @@ func Default() *Options {
 		Timeout:              3 * time.Minute,
 		PassFunc:             generate.GetPass,
 		EnableTokenProviders: true,
+		AttachSignature:      true,
 	}
 }
 

sign/sign.go

@@ -133,7 +133,7 @@ func (s *Signer) SignImage(reference string) (*SignedObject, error) {
 	}
 
 	if err := s.impl.SignImageInternal(ctx, ko, regOpts,
-		s.options.Annotations, images, "", true, outputSignature,
+		s.options.Annotations, images, "", s.options.AttachSignature, outputSignature,
 		outputCertificate, "", true, false, "",
 	); err != nil {
 		return nil, errors.Wrapf(err, "sign reference: %s", reference)