Documentation
¶
Index ¶
- func BundleFromDSSEEnvelope(dsseEnvelope *dsse.Envelope) (*protobundle.Bundle, error)
- func DSSEEnvelopeFromBundle(bundle *protobundle.Bundle) *dsse.Envelope
- func DSSEEnvelopeFromBundleBytes(bundle []byte) (*dsse.Envelope, error)
- func FixSignatureInBundle(bundle *protobundle.Bundle)
- func JSONEnvelopeWithDigest(envelope *dsse.Envelope) ([]byte, cr_v1.Hash, error)
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func BundleFromDSSEEnvelope ¶ added in v0.160.0
func BundleFromDSSEEnvelope(dsseEnvelope *dsse.Envelope) (*protobundle.Bundle, error)
func DSSEEnvelopeFromBundle ¶ added in v0.160.0
func DSSEEnvelopeFromBundle(bundle *protobundle.Bundle) *dsse.Envelope
DSSEEnvelopeFromBundle Extracts a DSSE envelope from a Sigstore bundle (Sigstore bundles have their own protobuf implementation for DSSE)
func DSSEEnvelopeFromBundleBytes ¶ added in v1.93.4
DSSEEnvelopeFromBundleBytes extracts a DSSE envelope from the protojson-encoded bytes of a Sigstore bundle. It validates that the bundle carries a DSSE envelope with at least one signature, since callers (and DSSEEnvelopeFromBundle) assume that invariant.
func FixSignatureInBundle ¶ added in v0.179.0
func FixSignatureInBundle(bundle *protobundle.Bundle)
FixSignatureInBundle removes any additional base64 encoding from the signature in the bundle. Kept for backward compatibility with attestations stored before the fix for https://github.com/chainloop-dev/chainloop/issues/1832, whose signatures are base64-encoded twice. New bundles produced by BundleFromDSSEEnvelope already carry a properly decoded signature.
Types ¶
This section is empty.
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
materials/accesschk
Package accesschk parses the text output of the Sysinternals AccessChk tool (https://learn.microsoft.com/en-us/sysinternals/downloads/accesschk) into a structured representation.
|
Package accesschk parses the text output of the Sysinternals AccessChk tool (https://learn.microsoft.com/en-us/sysinternals/downloads/accesschk) into a structured representation. |
|
materials/archiveio
Package archiveio detects and walks the archive containers Chainloop accepts as material values (zip, tar, tar.gz), enforcing the guards that keep a hostile archive from exhausting the host: entry-count and uncompressed-size limits, and rejection of paths that escape the extraction root.
|
Package archiveio detects and walks the archive containers Chainloop accepts as material values (zip, tar, tar.gz), enforcing the guards that keep a hostile archive from exhausting the host: entry-count and uncompressed-size limits, and rejection of paths that escape the extraction root. |
|
materials/cobertura
Package cobertura provides the XML structs to parse Cobertura code coverage reports.
|
Package cobertura provides the XML structs to parse Cobertura code coverage reports. |
|
materials/dranzer
Package dranzer parses the plain-text report produced by the CERT/CC dranzer tool (https://github.com/CERTCC/dranzer), which fuzz-tests ActiveX/COM controls.
|
Package dranzer parses the plain-text report produced by the CERT/CC dranzer tool (https://github.com/CERTCC/dranzer), which fuzz-tests ActiveX/COM controls. |
|
materials/radamsa
Package radamsa parses radamsa's -M metadata log into structured records.
|
Package radamsa parses radamsa's -M metadata log into structured records. |
|
materials/trufflehog
Package trufflehog parses TruffleHog's --json output, which is JSONL (newline-delimited: one JSON finding object per line), into structured findings.
|
Package trufflehog parses TruffleHog's --json output, which is JSONL (newline-delimited: one JSON finding object per line), into structured findings. |