releasepublish

package

v0.1.0 Latest Latest Go to latest Published: Aug 4, 2026 License: MIT Imports: 11 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/SecondStack-AI/SecondBox

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func ValidateEvidence(evidence CandidateEvidence, manifest releasecontract.ArtifactManifest, ...) error
func VerifyPublicationDirectory(directory string, input PublicationInput, inputFilename string) error
func VerifyPublicationSources(candidateDirectory, evidencePath string, input PublicationInput) error
type CandidateEvidence
- func CandidateEvidenceFor(manifest releasecontract.ArtifactManifest, manifestBytes []byte, ...) (CandidateEvidence, error)
- func DecodeCandidateEvidence(data []byte) (CandidateEvidence, error)
type Object
- func Plan(existing map[string]string, desired []Object) ([]Object, error)
type PublicationFile
type PublicationInput
- func BuildPublicationInput(candidateDirectory, evidencePath string) (PublicationInput, error)
- func DecodePublicationInput(data []byte) (PublicationInput, error)
- func (input PublicationInput) Validate() error

Constants ¶

View Source

const (
	PublicationInputSchema = 1
	MaximumTransportBytes  = int64(2_000_000_000)
	RoleCandidate          = "candidate"
	RoleEvidence           = "candidate-evidence"
)

Variables ¶

This section is empty.

Functions ¶

func ValidateEvidence ¶

func ValidateEvidence(evidence CandidateEvidence, manifest releasecontract.ArtifactManifest, manifestDigest string) error

func VerifyPublicationDirectory ¶

func VerifyPublicationDirectory(directory string, input PublicationInput, inputFilename string) error

func VerifyPublicationSources ¶

func VerifyPublicationSources(candidateDirectory, evidencePath string, input PublicationInput) error

Types ¶

type CandidateEvidence ¶

type CandidateEvidence struct {
	SchemaVersion int `json:"schemaVersion"`
	releasecontract.Identity
	ArtifactManifestDigest    string `json:"artifactManifestDigest"`
	SignedGuestManifestDigest string `json:"signedGuestManifestDigest"`
	Architecture              string `json:"architecture"`
	RunnerEnvironment         string `json:"runnerEnvironment"`
	Result                    string `json:"result"`
}

func CandidateEvidenceFor ¶

func CandidateEvidenceFor(manifest releasecontract.ArtifactManifest, manifestBytes []byte, runnerEnvironment string) (CandidateEvidence, error)

func DecodeCandidateEvidence ¶

func DecodeCandidateEvidence(data []byte) (CandidateEvidence, error)

type Object ¶

type Object struct {
	Coordinate string
	Digest     string
}

func Plan ¶

func Plan(existing map[string]string, desired []Object) ([]Object, error)

Plan applies immutable retry semantics. Existing coordinates are accepted only when they already contain the exact desired digest.

type PublicationFile ¶

type PublicationFile struct {
	Name   string `json:"name"`
	Digest string `json:"digest"`
	Size   int64  `json:"size"`
	Role   string `json:"role"`
}

type PublicationInput ¶

type PublicationInput struct {
	SchemaVersion int `json:"schemaVersion"`
	releasecontract.Identity
	ArtifactManifestDigest string            `json:"artifactManifestDigest"`
	Files                  []PublicationFile `json:"files"`
}

PublicationInput is the private draft-Release transport contract. It binds every locally built candidate byte and the pre-publication KVM evidence.

func BuildPublicationInput ¶

func BuildPublicationInput(candidateDirectory, evidencePath string) (PublicationInput, error)

func DecodePublicationInput ¶

func DecodePublicationInput(data []byte) (PublicationInput, error)

func (PublicationInput) Validate ¶

func (input PublicationInput) Validate() error

Source Files ¶

View all Source files

releasepublish.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL