Documentation
¶
Overview ¶
Package assetcatalog owns the immutable signed execution-asset catalog.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type FileAssetCatalog ¶
type FileAssetCatalog struct {
// contains filtered or unexported fields
}
FileAssetCatalog is an immutable startup snapshot of a release-generated catalog.
func LoadFileAssetCatalog ¶
func LoadFileAssetCatalog(path string) (*FileAssetCatalog, error)
LoadFileAssetCatalog validates one absolute read-only catalog path.
func (*FileAssetCatalog) Resolve ¶
func (catalog *FileAssetCatalog) Resolve(digest string) (SignedAsset, error)
Resolve returns an independent copy of one exact signed asset record.
func (*FileAssetCatalog) UsesSignatureKeyID ¶
func (catalog *FileAssetCatalog) UsesSignatureKeyID(keyID string) bool
UsesSignatureKeyID reports whether any catalog asset names the exact signing key.
type SignedAsset ¶
type SignedAsset struct {
ArtifactID string `json:"artifactId"`
ManifestDigest string `json:"manifestDigest"`
SignatureKeyID string `json:"signatureKeyId"`
Architecture string `json:"architecture"`
GuestProtocolGeneration uint32 `json:"guestProtocolGeneration"`
MandatoryGuestFeatures []string `json:"mandatoryGuestFeatures"`
}
SignedAsset is immutable release-catalog evidence consumed by placement.
type SignedAssetCatalog ¶
type SignedAssetCatalog interface {
Resolve(string) (SignedAsset, error)
}
SignedAssetCatalog resolves Profile digests without inventing trust metadata.
Source Files
Click to show internal directories.
Click to hide internal directories.