OptionalpublicPEM-encoded Ed25519 public key matching the signer. Required for
publish() because Rekor's hashedrekord verifier needs the
public key to validate signArtifact's signature against the
artifact hash.
OptionalretriesNumber of retries on transient failures. Default: 3.
OptionalretryBase delay between retries in milliseconds. Default: 1000.
OptionalserverRekor server URL. Default: 'https://rekor.sigstore.dev'.
OptionalsignSign the artifact's raw bytes (NOT the hex string) using the same
Ed25519 keypair whose public key is in publicKeyPem. Required
for publish(). Receives the canonical-anchor SHA-256 bytes and
must return an Ed25519 signature.
OptionaltimeoutRequest timeout in milliseconds. Default: 30000.
Base configuration shared by all anchor providers.