Merge pull request #8 from nicholasSUSE/importable-functions

making verify a public function in order to import at regsync ghactions

Author: pjbgf

cmd/verify.go

@@ -5,7 +5,7 @@ import (
 	"fmt"
 	"os"
 
-	"github.com/rancherlabs/slsactl/internal/verify"
+	"github.com/rancherlabs/slsactl/pkg/verify"
 )
 
 const verifyf = `usage:

internal/verify/mapping.go renamed to pkg/verify/mapping.go

@@ -20,6 +20,11 @@ var archSuffixes = []string{
 	"-arm64",
 }
 
+// Verify checks whether a given Rancher Prime image is signed based on the Cosign Signature spec.
+// The same extents to CNCF images within the Rancher ecosystem.
+//
+// Upstream documentation:
+// https://github.com/sigstore/cosign/blob/main/specs/SIGNATURE_SPEC.md
 func Verify(imageName string) error {
 	ctx, cancel := context.WithTimeout(context.Background(), timeout)
 	defer cancel()