bare

package

v0.2.9 Latest Latest Go to latest Published: Mar 7, 2026 License: Apache-2.0 Imports: 10 Imported by: 3

Details

Package bare implenta a parser to make non-signed attestations compatible with the ampel policy engine.

This section is empty.

This section is empty.

This section is empty.

type Envelope struct {
	Statement attestation.Statement
}

func (env *Envelope) GetCertificate() attestation.Certificate

func (env *Envelope) GetPredicate() attestation.Predicate

func (*Envelope) GetSignatures() []attestation.Signature

func (env *Envelope) GetStatement() attestation.Statement

func (*Envelope) GetVerification() attestation.Verification

GetVerifications returns always empty as they are by definition unsigned

func (env *Envelope) Verify(_ ...any) error

VerifySignature in bare envelopes never fails but it also always returns nil as its signature verification

type Parser struct{}

func New() *Parser

func (p *Parser) FileExtensions() []string

FileExtensions returns the file extennsions this parser will look at.

func (p *Parser) ParseStream(r io.Reader) ([]attestation.Envelope, error)

ParseStream reads an open stream and returns a parsed envelope