manifest

type Build struct {
	ConfigPath string            `json:"config_path"`
	BuildID    string            `json:"build_id"`
	Dockerfile string            `json:"dockerfile"`
	Context    string            `json:"context"`
	Target     *string           `json:"target"`
	BaseImage  string            `json:"base_image"`
	Args       map[string]string `json:"args"`
}

type Complete struct {
	ImageMeta    bool `json:"image_metadata"`
	SecurityMeta bool `json:"security_metadata"`
	SBOMImported bool `json:"sbom_imported"`
}

type GenerateOptions struct {
	RootDir   string
	BuildID   string // filter to a specific build ID
	Platform  string // filter to a specific platform (os/arch)
	Mode      string // ephemeral, workspace, commit, publish
	OutputDir string // output directory for manifest files
	DryRun    bool
	Version   string // app version for generator field
}

type Image struct {
	Refs         []string `json:"refs"`
	Digest       *string  `json:"digest"`
	ConfigDigest *string  `json:"config_digest"`
}

type InspectOptions struct {
	Section string // dot-path to extract (empty = whole manifest)
	Format  string // "json", "table", "human" (default: "human")
}

type InvItem struct {
	Name       string `json:"name"`
	Version    string `json:"version"`
	Pinned     bool   `json:"pinned"`
	Source     string `json:"source"`
	SourceRef  string `json:"source_ref"`
	Manager    string `json:"manager"`
	Confidence string `json:"confidence,omitempty"`
	URL        string `json:"url,omitempty"`
	Stage      string `json:"stage,omitempty"`
	Final      bool   `json:"final,omitempty"`
}

type Invs struct {
	Versions []InvItem `json:"versions"`
	Lineage  []InvItem `json:"lineage,omitempty"`
	Apk      []InvItem `json:"apk"`
	Apt      []InvItem `json:"apt"`
	Pip      []InvItem `json:"pip"`
	Galaxy   []InvItem `json:"galaxy"`
	Npm      []InvItem `json:"npm"`
	Go       []InvItem `json:"go"`
	Binaries []InvItem `json:"binaries"`
}

type Manifest struct {
	SchemaVersion int      `json:"schema_version"`
	Kind          string   `json:"kind"`
	Metadata      Metadata `json:"metadata"`
	Repo          Repo     `json:"repo"`
	Scope         Scope    `json:"scope"`
	Release       *Release `json:"release,omitempty"`
	Build         Build    `json:"build"`
	Targets       []Target `json:"targets"`
	Image         Image    `json:"image"`
	Completeness  Complete `json:"completeness"`
	Inventories   Invs     `json:"inventories"`
	Security      Security `json:"security"`
}

type Metadata struct {
	GeneratedAt string `json:"generated_at,omitempty"` // omitted in commit/workspace modes
	Generator   string `json:"generator"`
	State       string `json:"state"` // "prebuild" or "postbuild"
	Mode        string `json:"mode"`
}

type Platform struct {
	OS      string  `json:"os"`
	Arch    string  `json:"arch"`
	Variant *string `json:"variant"`
}

type Release struct {
	Version string `json:"version"`
	Tag     string `json:"tag"`
}

type Repo struct {
	URL           string `json:"url"`
	DefaultBranch string `json:"default_branch"`
	Commit        string `json:"commit"`
	Dirty         bool   `json:"dirty"`
}

type SBOMInfo struct {
	Present bool    `json:"present"`
	Format  *string `json:"format"`
	Path    *string `json:"path"`
	Digest  *string `json:"digest"`
}

type ScanInfo struct {
	Tool string `json:"tool"`
	Path string `json:"path"`
}

type Scope struct {
	Name     string    `json:"name"`
	BuildID  string    `json:"build_id"`
	Platform *Platform `json:"platform,omitempty"`
}

type Security struct {
	SBOM       SBOMInfo   `json:"sbom"`
	Signatures []SigInfo  `json:"signatures"`
	Scans      []ScanInfo `json:"scans"`
}

type SigInfo struct {
	Tool   string `json:"tool"`
	KeyRef string `json:"key_ref,omitempty"`
}

type Target struct {
	ID            string   `json:"id"`
	Kind          string   `json:"kind"`
	Provider      string   `json:"provider,omitempty"`
	URL           string   `json:"url"`
	Path          string   `json:"path"`
	Tags          []string `json:"tags,omitempty"`
	CredentialRef string   `json:"credential_ref,omitempty"`
}