add examples for cosign attach signature cmd (#3468)

* add examples for cosign attach signature cmd Signed-off-by: Vivek Kumar Sahu <[email protected]> * remove whitespace Signed-off-by: Vivek Kumar Sahu <[email protected]> * update cosign attach docs Signed-off-by: Vivek Kumar Sahu <[email protected]> --------- Signed-off-by: Vivek Kumar Sahu <[email protected]>
sigstore · Jan 4, 2024 · d372b9b · d372b9b
1 parent daf1eeb
commit d372b9b
Show file tree

Hide file tree

Showing 2 changed files with 38 additions and 4 deletions.
diff --git a/cmd/cosign/cli/attach.go b/cmd/cosign/cli/attach.go
@@ -43,9 +43,26 @@ func attachSignature() *cobra.Command {
 	o := &options.AttachSignatureOptions{}
 
 	cmd := &cobra.Command{
-		Use:              "signature",
-		Short:            "Attach signatures to the supplied container image",
-		Example:          "  cosign attach signature <image uri>",
+		Use:   "signature",
+		Short: "Attach signatures to the supplied container image",
+		Example: `  cosign attach signature [--payload <path>] [--signature < path>] [--rekor-response < path>] <image uri>
+
+		cosign attach signature command attaches payload, signature, rekor-bundle, etc in a new layer of provided image.
+		
+		# Attach signature can attach payload to a supplied image
+		cosign attach signature --payload <payload.json>  $IMAGE
+
+		# Attach signature can attach payload, signature to a supplied image
+		cosign attach signature --payload <payload.json> --signature <base64 signature file> $IMAGE
+
+		# Attach signature can attach payload, signature, time stamped response to a supplied image
+		cosign attach signature --payload <payload.json> --signature <base64 signature file> --tsr=<file> $IMAGE
+
+		# Attach signature attaches payload, signature and rekor-bundle via rekor-response to a supplied image
+		cosign attach signature --payload <payload.json> --signature <base64 signature file>  --rekor-response <proper rekor-response format file> $IMAGE
+
+		# Attach signature attaches payload, signature and rekor-bundle directly to a supplied image
+		cosign attach signature --payload <payload.json> --signature <base64 signature file>  --rekor-response <rekor-bundle file> $IMAGE`,
 		PersistentPreRun: options.BindViper,
 		Args:             cobra.ExactArgs(1),
 		RunE: func(cmd *cobra.Command, args []string) error {

diff --git a/doc/cosign_attach_signature.md b/doc/cosign_attach_signature.md