chainloop

type Auth struct {
	ID      string `json:"id"`
	Type    string `json:"type"`
	Name    string `json:"name,omitempty"`
	Subject string `json:"subject,omitempty"`
}

type CASBackend struct {
	CASBackendID   string `json:"casBackendID"`
	CASBackendName string `json:"casBackendName"`
	Fallback       bool   `json:"fallback"`
}

type Maintainer struct {
	Name  string `json:"name"`
	Email string `json:"email"`
}

type Metadata struct {
	Name                     string     `json:"name"`
	Project                  string     `json:"project"`
	ProjectVersion           string     `json:"projectVersion"`
	ProjectVersionPrerelease bool       `json:"projectVersionPrerelease"`
	Team                     string     `json:"team"`
	InitializedAt            *time.Time `json:"initializedAt"`
	FinishedAt               *time.Time `json:"finishedAt"`
	WorkflowRunID            string     `json:"workflowRunID"`
	WorkflowID               string     `json:"workflowID"`
	WorkflowName             string     `json:"workflowName"`
	Organization             string     `json:"organization"`
	ContractName             string     `json:"contractName"`
	ContractVersion          string     `json:"contractVersion"`
}

type NormalizablePredicate interface {
	GetAnnotations() map[string]string
	GetEnvVars() map[string]string
	GetMaterials() []*NormalizedMaterial
	GetRunLink() string
	GetMetadata() *Metadata
	GetPolicyEvaluations() map[string][]*PolicyEvaluation
	GetPolicyEvaluationsRef() *PolicyEvaluationsRef
	GetPolicyEvaluationStatus() *PolicyEvaluationStatus
}

type NormalizedMaterial struct {
	// Name of the Material
	Name string
	// Type of the Material
	Type string
	// filename of the artifact that was either uploaded or injected inline in "value"
	Filename string
	// Inline content for an artifact or string material (binary-safe)
	Value []byte
	// Hash of the Material
	Hash *crv1.Hash
	// Tag of the container image
	Tag string
	// Whether the Material was uploaded and available for download from CAS
	UploadedToCAS bool
	// Whether the Material was embedded inline in the attestation
	EmbeddedInline bool
	// Annotations contains all material annotations, both user-defined and
	// internal chainloop.* system annotations (e.g. chainloop.material.type,
	// chainloop.material.cas, chainloop.material.size, etc.)
	Annotations map[string]string
	// Referenced source component, for SBOMs, SARIF files, etc
	ReferencedSourceComponent *ReferencedSourceComponent
}

type PolicyEvaluation struct {
	Name         string `json:"name"`
	MaterialName string `json:"materialName,omitempty"`
	// Needed to read old attestations
	MaterialNameFallback string                     `json:"material_name,omitempty"`
	Body                 string                     `json:"body,omitempty"`
	Sources              []string                   `json:"sources,omitempty"`
	PolicyReference      *intoto.ResourceDescriptor `json:"policyReference,omitempty"`
	// Support old attestations
	PolicyReferenceFallback *intoto.ResourceDescriptor `json:"policy_reference,omitempty"`
	Description             string                     `json:"description,omitempty"`
	Annotations             map[string]string          `json:"annotations,omitempty"`
	Violations              []*PolicyViolation         `json:"violations,omitempty"`
	With                    map[string]string          `json:"with,omitempty"`
	Type                    string                     `json:"type"`
	Skipped                 bool                       `json:"skipped"`
	SkipReasons             []string                   `json:"skipReasons,omitempty"`
	GroupReference          *intoto.ResourceDescriptor `json:"groupReference,omitempty"`
	Requirements            []string                   `json:"requirements,omitempty"`
	Gate                    bool                       `json:"gate,omitempty"`
}

type PolicyEvaluationStatus struct {
	// Whether we want to block the attestation on policy violations
	Strategy PolicyViolationBlockingStrategy
	// Whether the policy check was bypassed
	Bypassed bool
	// Whether the attestation was blocked due to policy violations
	Blocked bool
	// Whether the attestation has policy violations
	HasViolations bool
	// Whether the attestation has gated policy violations
	HasGatedViolations bool
	// HasGates is true when a gate fired or strategy is ENFORCED, independent
	// of whether gated violations were recorded.
	HasGates bool
	// Total number of policy evaluations
	EvaluationsCount int
	// Total number of policy violations across all evaluations
	ViolationsCount int
	// Number of evaluations that were skipped (did not run).
	SkippedCount int
	// Number of evaluations that passed: neither skipped nor with violations.
	PassedCount int
	// Number of suppressed violations across all evaluations.
	SuppressedCount int
}

type PolicyEvaluationsRef struct {
	*intoto.ResourceDescriptor
	// Size in bytes of the referenced bundle. Zero when not recorded.
	SizeBytes int64 `json:"size,omitempty"`
}

type PolicyStatus string

type PolicyStatusSummary struct {
	Status   PolicyStatus
	Total    int
	Passed   int
	Skipped  int
	Violated int
	// See PolicyEvaluationStatus.HasGates. Independent of Status — a PASSED
	// run can still have HasGates=true.
	HasGates bool
	// Number of suppressed violations across all evaluations. Excluded
	// from Violated.
	Suppressed int
}

type PolicyViolation struct {
	Subject  string `json:"subject"`
	Message  string `json:"message"`
	Suppress bool   `json:"suppress,omitempty"`
	// Mirrors the oneof on attestation.v1.PolicyEvaluation.Violation. Only
	// populated on the bundle path; never on the inline predicate.
	Vulnerability    *v1.PolicyVulnerabilityFinding    `json:"vulnerability,omitempty"`
	Sast             *v1.PolicySASTFinding             `json:"sast,omitempty"`
	LicenseViolation *v1.PolicyLicenseViolationFinding `json:"licenseViolation,omitempty"`
}

type PolicyViolationBlockingStrategy string

type ProvenancePredicateCommon struct {
	Metadata   *Metadata         `json:"metadata"`
	Builder    *builder          `json:"builder"`
	BuildType  string            `json:"buildType"`
	Env        map[string]string `json:"env,omitempty"`
	RunnerType string            `json:"runnerType"`
	RunnerURL  string            `json:"runnerURL,omitempty"`
	// Custom annotations
	Annotations map[string]string `json:"annotations,omitempty"`
	// Additional properties related to runner
	RunnerEnvironment      string      `json:"runnerEnvironment,omitempty"`
	RunnerAuthenticated    bool        `json:"runnerAuthenticated,omitempty"`
	RunnerWorkflowFilePath string      `json:"runnerWorkflowFilePath,omitempty"`
	Auth                   *Auth       `json:"auth,omitempty"`
	CASBackend             *CASBackend `json:"casBackend,omitempty"`
}

type ProvenancePredicateV02 struct {
	*ProvenancePredicateCommon
	Materials []*intoto.ResourceDescriptor `json:"materials,omitempty"`
	// Deprecated: use PolicyEvaluationsRef to fetch full data from CAS.
	PolicyEvaluations map[string][]*PolicyEvaluation `json:"policyEvaluations,omitempty"`
	// Reference to the PolicyEvaluationBundle stored in CAS, carrying its size
	PolicyEvaluationsRef *PolicyEvaluationsRef `json:"policyEvaluationsRef,omitempty"`
	// Used to read policy evaluations from old attestations
	PolicyEvaluationsFallback map[string][]*PolicyEvaluation `json:"policy_evaluations,omitempty"`

	// Whether the attestation has policy violations
	PolicyHasViolations bool `json:"policyHasViolations"`
	// Total number of policy evaluations
	PolicyEvaluationsCount int `json:"policyEvaluationsCount"`
	// Total number of policy violations across all evaluations
	PolicyViolationsCount int `json:"policyViolationsCount"`
	// Number of evaluations that were skipped (did not run)
	PolicySkippedCount int `json:"policySkippedCount,omitempty"`
	// Number of evaluations that passed (no violations and not skipped)
	PolicyPassedCount int `json:"policyPassedCount,omitempty"`
	// Number of suppressed violations across all evaluations. Suppressed
	// entries themselves are not embedded in the predicate — they live in
	// the CAS-stored PolicyEvaluationBundle.
	PolicySuppressedCount int `json:"policySuppressedCount,omitempty"`
	// Whether the attestation has policy violations in gated policies
	PolicyHasGatedViolations bool `json:"policyHasGatedViolations,omitempty"`
	PolicyHasGates           bool `json:"policyHasGates,omitempty"`
	// Whether we want to block the attestation on policy violations
	PolicyCheckBlockingStrategy PolicyViolationBlockingStrategy `json:"policyCheckBlockingStrategy"`
	// Whether the policy check was bypassed
	PolicyBlockBypassEnabled bool `json:"policyBlockBypassEnabled"`
	// Whether the attestation was blocked due to policy violations
	PolicyAttBlocked bool `json:"policyAttBlocked"`
	// Default keyless signing authority (not necessarily the one used)
	SigningCA string `json:"signingCA,omitempty"`
	// Default TSA used for signing (not necessarily the one used)
	SigningTSA string `json:"signingTSA,omitempty"`
}

type ReferencedSourceComponent struct {
	// i.e container, file
	Type string `json:"type"`
	// i.e ghcr.io/chainloop-dev/chainloop/cli
	Name string `json:"name"`
	// i.e sha256:bbfd27fcdb15c8082951dc59be2310a2a2e6b95e11002f8411e5918887faa607
	// or a tag i.e v0.1.0
	Version string `json:"version"`
}

type RendererCommon struct {
	// contains filtered or unexported fields
}

type RendererV02 struct {
	*RendererCommon
	// contains filtered or unexported fields
}