v1

type Assessment struct {
	Message string `protobuf:"bytes,1,opt,name=message,proto3" json:"message,omitempty"`
	// contains filtered or unexported fields
}

type BlockMeta struct {

	// Description of the policy block
	Description string `protobuf:"bytes,1,opt,name=description,proto3" json:"description,omitempty"`
	// Assert mode to consider the policy block passing (OR or AND)
	AssertMode string `protobuf:"bytes,2,opt,name=assert_mode,json=assertMode,proto3" json:"assert_mode,omitempty"`
	// Enforce the block (ON or OFF)
	Enforce string `protobuf:"bytes,3,opt,name=enforce,proto3" json:"enforce,omitempty"`
	// Framework controls fronted by the block
	Controls []*Control `protobuf:"bytes,4,rep,name=controls,proto3" json:"controls,omitempty"`
	// contains filtered or unexported fields
}

type ChainLink struct {

	// Types that are valid to be assigned to Source:
	//
	//	*ChainLink_Predicate
	Source isChainLink_Source `protobuf_oneof:"source"`
	// contains filtered or unexported fields
}

type ChainLink_Predicate struct {
	Predicate *ChainedPredicate `protobuf:"bytes,1,opt,name=predicate,proto3,oneof"` // ChainedOutput output = 2;
}

type ChainedOutput struct {
	Policy string `protobuf:"bytes,1,opt,name=policy,proto3" json:"policy,omitempty"`
	Tenet  string `protobuf:"bytes,2,opt,name=tenet,proto3" json:"tenet,omitempty"`
	// contains filtered or unexported fields
}

type ChainedPredicate struct {
	Type       string      `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
	Selector   string      `protobuf:"bytes,2,opt,name=selector,proto3" json:"selector,omitempty"`
	Runtime    string      `protobuf:"bytes,3,opt,name=runtime,proto3" json:"runtime,omitempty"`
	Identities []*Identity `protobuf:"bytes,5,rep,name=identities,proto3" json:"identities,omitempty"`
	// contains filtered or unexported fields
}

type ChainedSubject struct {

	// source resource descriptor. The source provides evidence (attestations)
	// to compute a new resource descriptor (the destination) which becomes the
	// effective subject of the policy.
	Source *v1.ResourceDescriptor `protobuf:"bytes,1,opt,name=source,proto3" json:"source,omitempty"`
	// destination resource descriptor, computed from one of the source's attestations
	Destination *v1.ResourceDescriptor `protobuf:"bytes,2,opt,name=destination,proto3" json:"destination,omitempty"`
	// The link records how the source and destination are connected by keeping
	// track of the ingested attestation.
	Link *ChainedSubjectLink `protobuf:"bytes,3,opt,name=link,proto3" json:"link,omitempty"`
	// contains filtered or unexported fields
}

type ChainedSubjectLink struct {

	// Predicate type of the linker attestation
	Type string `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
	// attestation coordinates
	Attestation *v1.ResourceDescriptor `protobuf:"bytes,2,opt,name=attestation,proto3" json:"attestation,omitempty"`
	// identities used to verify the attestation at ingestion time (if any)
	Identities []*Identity `protobuf:"bytes,3,rep,name=identities,proto3" json:"identities,omitempty"`
	// contains filtered or unexported fields
}

type ContextVal struct {
	Type        string          `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
	Required    *bool           `protobuf:"varint,2,opt,name=required,proto3,oneof" json:"required,omitempty"`
	Value       *structpb.Value `protobuf:"bytes,3,opt,name=value,proto3,oneof" json:"value,omitempty"`
	Default     *structpb.Value `protobuf:"bytes,4,opt,name=default,proto3,oneof" json:"default,omitempty"`
	Description *string         `protobuf:"bytes,5,opt,name=description,proto3,oneof" json:"description,omitempty"`
	// contains filtered or unexported fields
}

type Control struct {
	Id        string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Class     string `protobuf:"bytes,2,opt,name=class,proto3" json:"class,omitempty"`
	Framework string `protobuf:"bytes,3,opt,name=framework,proto3" json:"framework,omitempty"`
	Title     string `protobuf:"bytes,4,opt,name=title,proto3" json:"title,omitempty"`
	// contains filtered or unexported fields
}

type Error struct {

	// Message contains the condition that failed to be met, causing the policy to fail.
	Message string `protobuf:"bytes,1,opt,name=message,proto3" json:"message,omitempty"`
	// Guidance is an optional text record that is surfaced to the user with
	// suggestions to make the policy evaluation pass.
	Guidance string `protobuf:"bytes,2,opt,name=guidance,proto3" json:"guidance,omitempty"`
	// contains filtered or unexported fields
}

type EvalResult struct {

	// id transferred from the tenet identifier
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// status is holds the PASS/FAIL/SOFTFAIL status of the eval
	Status string `protobuf:"bytes,2,opt,name=status,proto3" json:"status,omitempty"`
	// date when the evaluation was done
	Date *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=date,proto3" json:"date,omitempty"`
	// output holds the data structure of the evaluated outputs
	Output *structpb.Struct `protobuf:"bytes,4,opt,name=output,proto3" json:"output,omitempty"`
	// statements imported as evidence to evaluate the tenet
	Statements []*StatementRef `protobuf:"bytes,5,rep,name=statements,proto3" json:"statements,omitempty"`
	// error struct when evaluation failed
	Error *Error `protobuf:"bytes,6,opt,name=error,proto3" json:"error,omitempty"`
	// assessment outcome when evaluation passed
	Assessment *Assessment `protobuf:"bytes,7,opt,name=assessment,proto3" json:"assessment,omitempty"`
	// contains filtered or unexported fields
}

type FrameworkRef struct {
	Id         string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`                 // String identifier for the framework
	Name       string                 `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`             // Security framework name
	Definition *v1.ResourceDescriptor `protobuf:"bytes,3,opt,name=definition,proto3" json:"definition,omitempty"` // Link to the framework definition
	// contains filtered or unexported fields
}

type Identity struct {
	Id       string            `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Sigstore *IdentitySigstore `protobuf:"bytes,2,opt,name=sigstore,proto3,oneof" json:"sigstore,omitempty"`
	Key      *IdentityKey      `protobuf:"bytes,3,opt,name=key,proto3,oneof" json:"key,omitempty"`
	Ref      *IdentityRef      `protobuf:"bytes,4,opt,name=ref,proto3,oneof" json:"ref,omitempty"`
	// contains filtered or unexported fields
}

type IdentityKey struct {
	Id   string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`     // Key ID
	Type string `protobuf:"bytes,2,opt,name=type,proto3" json:"type,omitempty"` // Identity type
	Data string `protobuf:"bytes,3,opt,name=data,proto3" json:"data,omitempty"` // Public key data
	// contains filtered or unexported fields
}

type IdentityRef struct {
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type IdentitySigstore struct {
	Mode     *string `protobuf:"bytes,1,opt,name=mode,proto3,oneof" json:"mode,omitempty"`   // exact | regexp
	Issuer   string  `protobuf:"bytes,2,opt,name=issuer,proto3" json:"issuer,omitempty"`     // https://accounts.google.com
	Identity string  `protobuf:"bytes,3,opt,name=identity,proto3" json:"identity,omitempty"` //  "identity": "puerco@gmail.com"
	// contains filtered or unexported fields
}

type Meta struct {
	Runtime     string                 `protobuf:"bytes,1,opt,name=runtime,proto3" json:"runtime,omitempty"`
	Description string                 `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
	AssertMode  string                 `protobuf:"bytes,3,opt,name=assert_mode,json=assertMode,proto3" json:"assert_mode,omitempty"`
	Controls    []*Control             `protobuf:"bytes,4,rep,name=controls,proto3" json:"controls,omitempty"`
	Version     int64                  `protobuf:"varint,5,opt,name=version,proto3" json:"version,omitempty"`
	Enforce     string                 `protobuf:"bytes,6,opt,name=enforce,proto3" json:"enforce,omitempty"`
	Expiration  *timestamppb.Timestamp `protobuf:"bytes,7,opt,name=expiration,proto3,oneof" json:"expiration,omitempty"`
	Origin      *v1.ResourceDescriptor `protobuf:"bytes,8,opt,name=origin,proto3,oneof" json:"origin,omitempty"`
	// contains filtered or unexported fields
}

type Output struct {
	Code  string          `protobuf:"bytes,1,opt,name=code,proto3" json:"code,omitempty"`
	Value *structpb.Value `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
	// contains filtered or unexported fields
}

type Policy struct {
	Id           string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Source       *PolicyRef             `protobuf:"bytes,2,opt,name=source,proto3" json:"source,omitempty"`
	Meta         *Meta                  `protobuf:"bytes,3,opt,name=meta,proto3" json:"meta,omitempty"`
	Context      map[string]*ContextVal `` /* 141-byte string literal not displayed */
	Chain        []*ChainLink           `protobuf:"bytes,5,rep,name=chain,proto3" json:"chain,omitempty"`
	Identities   []*Identity            `protobuf:"bytes,6,rep,name=identities,proto3" json:"identities,omitempty"`
	Predicates   *PredicateSpec         `protobuf:"bytes,7,opt,name=predicates,proto3" json:"predicates,omitempty"`
	Transformers []*Transformer         `protobuf:"bytes,8,rep,name=transformers,proto3" json:"transformers,omitempty"`
	Tenets       []*Tenet               `protobuf:"bytes,9,rep,name=tenets,proto3" json:"tenets,omitempty"`
	// contains filtered or unexported fields
}

type PolicyBlock struct {

	// ID string identifying the block
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// BlockMeta contains the metadata describing the
	Meta *BlockMeta `protobuf:"bytes,2,opt,name=meta,proto3" json:"meta,omitempty"`
	// Policies is the list of policies grouped in the block
	Policies []*Policy `protobuf:"bytes,3,rep,name=policies,proto3" json:"policies,omitempty"`
	// contains filtered or unexported fields
}

type PolicyGroup struct {

	// Group identifier
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Group metadata
	Meta *PolicyGroupMeta `protobuf:"bytes,2,opt,name=meta,proto3" json:"meta,omitempty"`
	// Group reference
	Source *PolicyGroupRef `protobuf:"bytes,3,opt,name=source,proto3" json:"source,omitempty"`
	// Policy blocks modeling the group begaviour.
	Blocks []*PolicyBlock `protobuf:"bytes,4,rep,name=blocks,proto3" json:"blocks,omitempty"`
	// contains filtered or unexported fields
}

type PolicyGroupMeta struct {

	// Description of the policy block
	Description string `protobuf:"bytes,1,opt,name=description,proto3" json:"description,omitempty"`
	// Version of the group
	Version int64 `protobuf:"varint,2,opt,name=version,proto3" json:"version,omitempty"`
	// Control fronted by the policy group
	Controls []*Control `protobuf:"bytes,3,rep,name=controls,proto3" json:"controls,omitempty"`
	// Enforce the block (ON or OFF)
	Enforce string `protobuf:"bytes,4,opt,name=enforce,proto3" json:"enforce,omitempty"`
	// Expiration date of the policy group
	Expiration *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=expiration,proto3,oneof" json:"expiration,omitempty"`
	// Source of the group data when compiled from remote sources
	Origin *v1.ResourceDescriptor `protobuf:"bytes,6,opt,name=origin,proto3,oneof" json:"origin,omitempty"`
	// contains filtered or unexported fields
}

type PolicyGroupRef struct {

	// Group ID
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Pinned version of the group
	Version int64 `protobuf:"varint,2,opt,name=version,proto3" json:"version,omitempty"`
	// Expected identity when the group file is signed
	Identity *Identity `protobuf:"bytes,3,opt,name=identity,proto3" json:"identity,omitempty"`
	// Source location when referenced remotely
	Location *v1.ResourceDescriptor `protobuf:"bytes,4,opt,name=location,proto3" json:"location,omitempty"`
	// contains filtered or unexported fields
}

type PolicyRef struct {
	Id       string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Version  int64                  `protobuf:"varint,2,opt,name=version,proto3" json:"version,omitempty"`
	Identity *Identity              `protobuf:"bytes,3,opt,name=identity,proto3" json:"identity,omitempty"`
	Location *v1.ResourceDescriptor `protobuf:"bytes,4,opt,name=location,proto3" json:"location,omitempty"`
	// contains filtered or unexported fields
}

type PolicySet struct {

	// ID is the policySet identifier
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Meta holds the PolicySet metadata informartion
	Meta *PolicySetMeta `protobuf:"bytes,2,opt,name=meta,proto3" json:"meta,omitempty"`
	// Common groups the common data elements to be share by all the
	// policies in the set.
	Common *PolicySetCommon `protobuf:"bytes,3,opt,name=common,proto3" json:"common,omitempty"`
	// Policies is the list of policies grouped in the PolicySet
	Policies []*Policy `protobuf:"bytes,4,rep,name=policies,proto3" json:"policies,omitempty"`
	// Chain is the evidence chain to compute a set of subjects to which
	// al the policies will apply.
	Chain []*ChainLink `protobuf:"bytes,5,rep,name=chain,proto3" json:"chain,omitempty"`
	// PolicyGroup definitions
	Groups []*PolicyGroup `protobuf:"bytes,6,rep,name=groups,proto3" json:"groups,omitempty"`
	// contains filtered or unexported fields
}

type PolicySetCommon struct {
	Identities []*Identity            `protobuf:"bytes,1,rep,name=identities,proto3" json:"identities,omitempty"`
	References []*PolicyRef           `protobuf:"bytes,2,rep,name=references,proto3" json:"references,omitempty"`
	Context    map[string]*ContextVal `` /* 141-byte string literal not displayed */
	// contains filtered or unexported fields
}

type PolicySetMeta struct {
	Runtime     string                 `protobuf:"bytes,1,opt,name=runtime,proto3" json:"runtime,omitempty"`
	Description string                 `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
	Expiration  *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=expiration,proto3" json:"expiration,omitempty"`
	Version     int64                  `protobuf:"varint,4,opt,name=version,proto3" json:"version,omitempty"`
	Enforce     string                 `protobuf:"bytes,5,opt,name=enforce,proto3" json:"enforce,omitempty"`
	Frameworks  []*FrameworkRef        `protobuf:"bytes,6,rep,name=frameworks,proto3" json:"frameworks,omitempty"`
	Origin      *v1.ResourceDescriptor `protobuf:"bytes,7,opt,name=origin,proto3,oneof" json:"origin,omitempty"`
	// contains filtered or unexported fields
}

type PredicateSpec struct {
	Types []string `protobuf:"bytes,1,rep,name=types,proto3" json:"types,omitempty"`
	Limit int32    `protobuf:"varint,2,opt,name=limit,proto3" json:"limit,omitempty"`
	// contains filtered or unexported fields
}

type RemoteReference interface {
	GetId() string
	GetIdentity() *Identity
	GetLocation() *intoto.ResourceDescriptor
	GetSourceURL() string
	GetVersion() int64
	SetVersion(int64)
}

type Result struct {

	// status holds the PASS/FAIL/SOFTFAIL status label of the Policy evaluation
	Status string `protobuf:"bytes,1,opt,name=status,proto3" json:"status,omitempty"`
	// Time when the policy evaluation started
	DateStart *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=date_start,json=dateStart,proto3" json:"date_start,omitempty"`
	// Time when the policy evaluation concluded
	DateEnd *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=date_end,json=dateEnd,proto3" json:"date_end,omitempty"`
	// Reference to the policy code
	Policy *PolicyRef `protobuf:"bytes,4,opt,name=policy,proto3" json:"policy,omitempty"`
	// eval_results holds each of the tenet's evaluation results
	EvalResults []*EvalResult `protobuf:"bytes,5,rep,name=eval_results,json=evalResults,proto3" json:"eval_results,omitempty"`
	// meta from the original policy
	Meta *Meta `protobuf:"bytes,6,opt,name=meta,proto3" json:"meta,omitempty"`
	// context data loaded into the policy runtime
	Context *structpb.Struct `protobuf:"bytes,7,opt,name=context,proto3" json:"context,omitempty"`
	// chain holds the custody chain configuration when a policy uses chained subjects
	Chain []*ChainedSubject `protobuf:"bytes,8,rep,name=chain,proto3" json:"chain,omitempty"`
	// original subject under scrutiny. This may not be the effective subject if
	// the policy uses chained subjects.
	Subject *v1.ResourceDescriptor `protobuf:"bytes,9,opt,name=subject,proto3" json:"subject,omitempty"`
	// contains filtered or unexported fields
}

type ResultSet struct {

	// Reference to the PolicySet that produced the ResultSet
	PolicySet *PolicyRef `protobuf:"bytes,1,opt,name=policy_set,json=policySet,proto3" json:"policy_set,omitempty"`
	// meta block transferred from the PolicySet
	Meta *PolicySetMeta `protobuf:"bytes,2,opt,name=meta,proto3" json:"meta,omitempty"`
	// status holds the PASS/FAIL/SOFTFAIL status label of the whole PolicySet evaluation
	Status string `protobuf:"bytes,3,opt,name=status,proto3" json:"status,omitempty"`
	// date_start time when the evaluation started
	DateStart *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=date_start,json=dateStart,proto3" json:"date_start,omitempty"`
	// date_end time when the evaluation finished
	DateEnd *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=date_end,json=dateEnd,proto3" json:"date_end,omitempty"`
	// subject under evaluation
	Subject *v1.ResourceDescriptor `protobuf:"bytes,6,opt,name=subject,proto3" json:"subject,omitempty"`
	// results from each of the policies in the set
	Results []*Result `protobuf:"bytes,7,rep,name=results,proto3" json:"results,omitempty"`
	// error captures an error that failed the evaluation at the PolicySet level
	Error *Error `protobuf:"bytes,8,opt,name=error,proto3" json:"error,omitempty"`
	// The ResultSet common struct varies from its policySet siblingas here,
	// the contextual information has the computed values, not the definitions.
	Common *ResultSetCommon `protobuf:"bytes,9,opt,name=common,proto3" json:"common,omitempty"`
	// contains filtered or unexported fields
}

type ResultSetCommon struct {

	// Context contains the computed common context values
	Context *structpb.Struct `protobuf:"bytes,9,opt,name=context,proto3" json:"context,omitempty"`
	// contains filtered or unexported fields
}

type Results interface {
	GetStatus() string
}

type SignatureVerification struct {

	// Date when the verification was performed
	Date *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=date,proto3" json:"date,omitempty"`
	// SignatureVerified is set to true when a hash's signature was verified
	// with at least one key or cert. Verified does not imply any identity check.
	Verified bool `protobuf:"varint,2,opt,name=verified,proto3" json:"verified,omitempty"`
	// Identities has a list of the identities (sigstore signers or keys)
	// that signed the object.
	Identities []*Identity `protobuf:"bytes,3,rep,name=Identities,proto3" json:"Identities,omitempty"`
	// Message is an optional message that can be populated when a verification
	// was performed successfully.
	Message string `protobuf:"bytes,4,opt,name=message,proto3" json:"message,omitempty"`
	// Error is a message explaining why verification failed.
	Error string `protobuf:"bytes,5,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type StatementRef struct {

	// type holds the predicate type of the referenced attestation
	Type string `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
	// attestation is a resource descriptor that records the attestation coordinates
	Attestation *v1.ResourceDescriptor `protobuf:"bytes,2,opt,name=attestation,proto3" json:"attestation,omitempty"`
	// identities captures the identities matched when verifying
	// the statement.
	Identities []*Identity `protobuf:"bytes,3,rep,name=identities,proto3" json:"identities,omitempty"`
	// contains filtered or unexported fields
}

type Tenet struct {
	Id         string             `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Runtime    string             `protobuf:"bytes,2,opt,name=runtime,proto3" json:"runtime,omitempty"`
	Code       string             `protobuf:"bytes,3,opt,name=code,proto3" json:"code,omitempty"`
	Predicates *PredicateSpec     `protobuf:"bytes,4,opt,name=predicates,proto3" json:"predicates,omitempty"`
	Outputs    map[string]*Output `` /* 141-byte string literal not displayed */
	Error      *Error             `protobuf:"bytes,6,opt,name=error,proto3" json:"error,omitempty"`
	Title      string             `protobuf:"bytes,7,opt,name=title,proto3" json:"title,omitempty"`
	Assessment *Assessment        `protobuf:"bytes,8,opt,name=assessment,proto3" json:"assessment,omitempty"`
	// contains filtered or unexported fields
}

type Transformer struct {
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type Verification struct {
	Signature *SignatureVerification `protobuf:"bytes,1,opt,name=signature,proto3" json:"signature,omitempty"`
	// contains filtered or unexported fields
}