annotations

type EventAttributes struct {

	// type is the cloudevent type to use for the outbound event.
	Type string `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
	// extensions lists which extensions
	Extensions []string `protobuf:"bytes,2,rep,name=extensions,proto3" json:"extensions,omitempty"`
	// audience is the intended audience for the event.
	Audience EventAttributes_Audience `protobuf:"varint,3,opt,name=audience,proto3,enum=chainguard.annotations.EventAttributes_Audience" json:"audience,omitempty"`
	// contains filtered or unexported fields
}

type EventAttributes_Audience int32

type IAM struct {

	// Types that are valid to be assigned to Mode:
	//
	//	*IAM_Disabled
	//	*IAM_Enabled
	Mode isIAM_Mode `protobuf_oneof:"mode"`
	// contains filtered or unexported fields
}

type IAM_Disabled struct {
	Disabled *emptypb.Empty `protobuf:"bytes,1,opt,name=disabled,proto3,oneof"`
}

type IAM_Enabled struct {
	Enabled *IAM_Rules `protobuf:"bytes,2,opt,name=enabled,proto3,oneof"`
}

type IAM_Rules struct {

	// A list of capabilities required by a particular API.
	// This field is either scoped or unscoped, as determined
	// by the field below.
	//  * When it is "scoped", this field is combined with the
	//    field designated by "(iam_scope) = true" (see below)
	//    on the request message to indicate what capabilities
	//    the caller needs at what scope in order to authorize
	//    the action they are performing.
	//  * When is it "unscoped", this field is used to determine
	//    the set of scopes the caller has the appropriate access
	//    to so that the RPC itself can scope down the results
	//    it returns.
	Capabilities []capabilities.Capability `protobuf:"varint,1,rep,packed,name=capabilities,proto3,enum=chainguard.capabilities.Capability" json:"capabilities,omitempty"`
	// Unscoped is set on APIs where the request itself doesn't
	// carry a field with "iam_scope", and instead scopes itself
	// to the set of groups to which the caller has access
	// according to their OIDC token.
	Unscoped bool `protobuf:"varint,2,opt,name=unscoped,proto3" json:"unscoped,omitempty"`
	// contains filtered or unexported fields
}

type MCP struct {

	// Human-readable description surfaced as the MCP tool description.
	Description string `protobuf:"bytes,1,opt,name=description,proto3" json:"description,omitempty"`
	// When true, the method is excluded from the MCP tool surface.
	Hidden bool `protobuf:"varint,2,opt,name=hidden,proto3" json:"hidden,omitempty"`
	// Tool does not modify any state (e.g. Get, List).
	ReadOnly bool `protobuf:"varint,3,opt,name=read_only,json=readOnly,proto3" json:"read_only,omitempty"`
	// Tool may cause irreversible changes (e.g. Delete).
	// Optional: unset means "assume destructive" per MCP spec.
	Destructive *bool `protobuf:"varint,4,opt,name=destructive,proto3,oneof" json:"destructive,omitempty"`
	// Repeated calls with the same arguments have the same effect as one call.
	Idempotent bool `protobuf:"varint,5,opt,name=idempotent,proto3" json:"idempotent,omitempty"`
	// Tool interacts with external systems beyond the immediate context.
	// Optional: unset means "assume open-world" per MCP spec.
	OpenWorld *bool `protobuf:"varint,6,opt,name=open_world,json=openWorld,proto3,oneof" json:"open_world,omitempty"`
	// contains filtered or unexported fields
}