annotations

type EventAttributes struct {

	// type is the cloudevent type to use for the outbound event.
	Type string `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
	// extensions lists which extensions
	Extensions []string `protobuf:"bytes,2,rep,name=extensions,proto3" json:"extensions,omitempty"`
	// audience is the intended audience for the event.
	Audience EventAttributes_Audience `protobuf:"varint,3,opt,name=audience,proto3,enum=chainguard.annotations.EventAttributes_Audience" json:"audience,omitempty"`
	// contains filtered or unexported fields
}

type EventAttributes_Audience int32

type IAM struct {

	// Types that are assignable to Mode:
	//
	//	*IAM_Disabled
	//	*IAM_Enabled
	Mode isIAM_Mode `protobuf_oneof:"mode"`
	// contains filtered or unexported fields
}

type IAM_Disabled struct {
	Disabled *emptypb.Empty `protobuf:"bytes,1,opt,name=disabled,proto3,oneof"`
}

type IAM_Enabled struct {
	Enabled *IAM_Rules `protobuf:"bytes,2,opt,name=enabled,proto3,oneof"`
}

type IAM_Rules struct {

	// A list of capabilities required by a particular API.
	// This field is either scoped or unscoped, as determined
	// by the field below.
	//   - When it is "scoped", this field is combined with the
	//     field designated by "(iam_scope) = true" (see below)
	//     on the request message to indicate what capabilities
	//     the caller needs at what scope in order to authorize
	//     the action they are performing.
	//   - When is it "unscoped", this field is used to determine
	//     the set of scopes the caller has the appropriate access
	//     to so that the RPC itself can scope down the results
	//     it returns.
	Capabilities []capabilities.Capability `protobuf:"varint,1,rep,packed,name=capabilities,proto3,enum=chainguard.capabilities.Capability" json:"capabilities,omitempty"`
	// Unscoped is set on APIs where the request itself doesn't
	// carry a field with "iam_scope", and instead scopes itself
	// to the set of groups to which the caller has access
	// according to their OIDC token.
	Unscoped bool `protobuf:"varint,2,opt,name=unscoped,proto3" json:"unscoped,omitempty"`
	// contains filtered or unexported fields
}