internal/

Package advisory provides vulnerability checking against npm security advisories.

Package attestation provides data structures for attestations, signatures, and provenance information used in supply chain verification.

Package cli implements the countersign command-line interface.

Package constants defines shared constants used throughout Countersign.

Package engine provides the core verification logic for attestations.

Package output provides output formatting for CLI results.

Package policy provides trust policy management and evaluation.

Package prompt provides interactive terminal prompts for CLI operations.

Package registry provides clients for package registries.

Package sbom provides SBOM (Software Bill of Materials) parsing and verification.

Package score provides trust score calculation for verification results.

Package signer provides Sigstore keyless signing capabilities.

Package store provides persistent storage for Countersign data.

Package verifier provides cryptographic verification of Sigstore attestations.