v1

type Attestation struct {
	InitializedAt *timestamppb.Timestamp           `protobuf:"bytes,1,opt,name=initialized_at,json=initializedAt,proto3" json:"initialized_at,omitempty"`
	FinishedAt    *timestamppb.Timestamp           `protobuf:"bytes,2,opt,name=finished_at,json=finishedAt,proto3" json:"finished_at,omitempty"`
	Workflow      *WorkflowMetadata                `protobuf:"bytes,3,opt,name=workflow,proto3" json:"workflow,omitempty"`
	Materials     map[string]*Attestation_Material `` /* 159-byte string literal not displayed */
	// Annotations for the attestation
	Annotations map[string]string `` /* 163-byte string literal not displayed */
	// List of env variables
	EnvVars    map[string]string                   `` /* 170-byte string literal not displayed */
	RunnerUrl  string                              `protobuf:"bytes,7,opt,name=runner_url,json=runnerUrl,proto3" json:"runner_url,omitempty"`
	RunnerType v1.CraftingSchema_Runner_RunnerType `` /* 150-byte string literal not displayed */
	// Head Commit of the environment where the attestation was executed (optional)
	Head *Commit `protobuf:"bytes,9,opt,name=head,proto3" json:"head,omitempty"`
	// Policies that materials in this attestation were validated against
	PolicyEvaluations []*PolicyEvaluation `protobuf:"bytes,10,rep,name=policy_evaluations,json=policyEvaluations,proto3" json:"policy_evaluations,omitempty"`
	// fail the attestation if policy evaluation fails
	BlockOnPolicyViolation bool `` /* 133-byte string literal not displayed */
	// bypass policy check
	BypassPolicyCheck bool `protobuf:"varint,14,opt,name=bypass_policy_check,json=bypassPolicyCheck,proto3" json:"bypass_policy_check,omitempty"`
	// Signing options
	SigningOptions *Attestation_SigningOptions `protobuf:"bytes,15,opt,name=signing_options,json=signingOptions,proto3" json:"signing_options,omitempty"`
	// Runner environment in which the attestation was crafted
	RunnerEnvironment *RunnerEnvironment `protobuf:"bytes,16,opt,name=runner_environment,json=runnerEnvironment,proto3" json:"runner_environment,omitempty"`
	// Authentication information used during attestation
	Auth *Attestation_Auth `protobuf:"bytes,17,opt,name=auth,proto3" json:"auth,omitempty"`
	// array of hostnames that are allowed to be used in the policies
	PoliciesAllowedHostnames []string `` /* 136-byte string literal not displayed */
	// contains filtered or unexported fields
}

type Attestation_Auth struct {
	Type Attestation_Auth_AuthType `protobuf:"varint,1,opt,name=type,proto3,enum=attestation.v1.Attestation_Auth_AuthType" json:"type,omitempty"`
	// Identifier of the authentication (user ID, token ID, etc.)
	Id string `protobuf:"bytes,2,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type Attestation_Auth_AuthType int32

type Attestation_Material struct {
	Id string `protobuf:"bytes,12,opt,name=id,proto3" json:"id,omitempty"`
	// Types that are assignable to M:
	//
	//	*Attestation_Material_String_
	//	*Attestation_Material_ContainerImage_
	//	*Attestation_Material_Artifact_
	//	*Attestation_Material_SbomArtifact
	M            isAttestation_Material_M                `protobuf_oneof:"m"`
	AddedAt      *timestamppb.Timestamp                  `protobuf:"bytes,5,opt,name=added_at,json=addedAt,proto3" json:"added_at,omitempty"`
	MaterialType v1.CraftingSchema_Material_MaterialType `` /* 160-byte string literal not displayed */
	// Whether the material has been uploaded to the CAS
	UploadedToCas bool `protobuf:"varint,7,opt,name=uploaded_to_cas,json=uploadedToCas,proto3" json:"uploaded_to_cas,omitempty"`
	// If the material content has been injected inline in the attestation
	// leveraging a form of inline CAS
	InlineCas bool `protobuf:"varint,8,opt,name=inline_cas,json=inlineCas,proto3" json:"inline_cas,omitempty"`
	// Annotations for the material
	Annotations map[string]string `` /* 163-byte string literal not displayed */
	Output      bool              `protobuf:"varint,10,opt,name=output,proto3" json:"output,omitempty"`
	Required    bool              `protobuf:"varint,11,opt,name=required,proto3" json:"required,omitempty"`
	// contains filtered or unexported fields
}

type Attestation_Material_Artifact struct {

	// NOT USED, kept for compatibility with servers that still perform server-side validation“
	// TODO: remove after some time
	//
	// Deprecated: Marked as deprecated in attestation/v1/crafting_state.proto.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// filename, use for record purposes
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// the digest is enough to retrieve the artifact since it's stored in a CAS
	// which also has annotated the fileName
	Digest    string `protobuf:"bytes,3,opt,name=digest,proto3" json:"digest,omitempty"`
	IsSubject bool   `protobuf:"varint,4,opt,name=is_subject,json=isSubject,proto3" json:"is_subject,omitempty"`
	// Inline content of the artifact.
	// This is optional and is used for small artifacts that can be stored inline in the attestation
	Content []byte `protobuf:"bytes,5,opt,name=content,proto3" json:"content,omitempty"`
	// contains filtered or unexported fields
}

type Attestation_Material_Artifact_ struct {
	Artifact *Attestation_Material_Artifact `protobuf:"bytes,3,opt,name=artifact,proto3,oneof"`
}

type Attestation_Material_ContainerImage struct {

	// NOT USED, kept for compatibility with servers that still perform server-side validation“
	// TODO: remove after some time
	//
	// Deprecated: Marked as deprecated in attestation/v1/crafting_state.proto.
	Id        string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Name      string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	Digest    string `protobuf:"bytes,3,opt,name=digest,proto3" json:"digest,omitempty"`
	IsSubject bool   `protobuf:"varint,4,opt,name=is_subject,json=isSubject,proto3" json:"is_subject,omitempty"`
	// provided tag
	Tag string `protobuf:"bytes,5,opt,name=tag,proto3" json:"tag,omitempty"`
	// Digest of the found signature for the image
	SignatureDigest string `protobuf:"bytes,6,opt,name=signature_digest,json=signatureDigest,proto3" json:"signature_digest,omitempty"`
	// The provider in charge of the signature
	SignatureProvider string `protobuf:"bytes,7,opt,name=signature_provider,json=signatureProvider,proto3" json:"signature_provider,omitempty"`
	// Base64 encoded signature payload, aka the OCI Signature Manifest
	Signature string `protobuf:"bytes,8,opt,name=signature,proto3" json:"signature,omitempty"`
	// Indicates if the image has the latest tag. The image being checked
	// might not explicitly have the latest tag, but it could also be tagged
	// with the latest tag.
	HasLatestTag *wrapperspb.BoolValue `protobuf:"bytes,9,opt,name=has_latest_tag,json=hasLatestTag,proto3" json:"has_latest_tag,omitempty"`
	// contains filtered or unexported fields
}

type Attestation_Material_ContainerImage_ struct {
	ContainerImage *Attestation_Material_ContainerImage `protobuf:"bytes,2,opt,name=container_image,json=containerImage,proto3,oneof"`
}

type Attestation_Material_KeyVal struct {

	// NOT USED, kept for compatibility with servers that still perform server-side validation“
	// TODO: remove after some time
	//
	// Deprecated: Marked as deprecated in attestation/v1/crafting_state.proto.
	Id     string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Value  string `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
	Digest string `protobuf:"bytes,3,opt,name=digest,proto3" json:"digest,omitempty"`
	// contains filtered or unexported fields
}

type Attestation_Material_SBOMArtifact struct {

	// The actual SBOM artifact
	Artifact *Attestation_Material_Artifact `protobuf:"bytes,1,opt,name=artifact,proto3" json:"artifact,omitempty"`
	// The Main component if any the SBOM is related to
	MainComponent *Attestation_Material_SBOMArtifact_MainComponent `protobuf:"bytes,2,opt,name=main_component,json=mainComponent,proto3" json:"main_component,omitempty"`
	// contains filtered or unexported fields
}

type Attestation_Material_SBOMArtifact_MainComponent struct {

	// The name of the main component
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The version of the main component
	Version string `protobuf:"bytes,2,opt,name=version,proto3" json:"version,omitempty"`
	// The kind of the main component
	Kind string `protobuf:"bytes,3,opt,name=kind,proto3" json:"kind,omitempty"`
	// contains filtered or unexported fields
}

type Attestation_Material_SbomArtifact struct {
	SbomArtifact *Attestation_Material_SBOMArtifact `protobuf:"bytes,4,opt,name=sbom_artifact,json=sbomArtifact,proto3,oneof"`
}

type Attestation_Material_String_ struct {
	String_ *Attestation_Material_KeyVal `protobuf:"bytes,1,opt,name=string,proto3,oneof"`
}

type Attestation_SigningOptions struct {

	// TSA URL
	TimestampAuthorityUrl string `` /* 126-byte string literal not displayed */
	// Signing CA to be used for signing
	SigningCa string `protobuf:"bytes,2,opt,name=signing_ca,json=signingCa,proto3" json:"signing_ca,omitempty"`
	// contains filtered or unexported fields
}

type Commit struct {
	Hash string `protobuf:"bytes,1,opt,name=hash,proto3" json:"hash,omitempty"`
	// Commit authors might not include email i.e "Flux <>"
	AuthorEmail string                 `protobuf:"bytes,2,opt,name=author_email,json=authorEmail,proto3" json:"author_email,omitempty"`
	AuthorName  string                 `protobuf:"bytes,3,opt,name=author_name,json=authorName,proto3" json:"author_name,omitempty"`
	Message     string                 `protobuf:"bytes,4,opt,name=message,proto3" json:"message,omitempty"`
	Date        *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=date,proto3" json:"date,omitempty"`
	Remotes     []*Commit_Remote       `protobuf:"bytes,6,rep,name=remotes,proto3" json:"remotes,omitempty"`
	Signature   string                 `protobuf:"bytes,7,opt,name=signature,proto3" json:"signature,omitempty"`
	// contains filtered or unexported fields
}

type Commit_Remote struct {
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	Url  string `protobuf:"bytes,2,opt,name=url,proto3" json:"url,omitempty"`
	// contains filtered or unexported fields
}

type CraftingState struct {
	InputSchema *v1.CraftingSchema `protobuf:"bytes,1,opt,name=input_schema,json=inputSchema,proto3" json:"input_schema,omitempty"`
	Attestation *Attestation       `protobuf:"bytes,2,opt,name=attestation,proto3" json:"attestation,omitempty"`
	DryRun      bool               `protobuf:"varint,3,opt,name=dry_run,json=dryRun,proto3" json:"dry_run,omitempty"`
	// contains filtered or unexported fields
}

type NormalizedMaterialOutput struct {
	Name, Digest string
	IsOutput     bool
	Content      []byte
}

type PolicyEvaluation struct {

	// The policy name from the policy spec
	Name         string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	MaterialName string `protobuf:"bytes,2,opt,name=material_name,json=materialName,proto3" json:"material_name,omitempty"`
	// the body of the policy. This field will be empty if there is a FQDN reference to the policy
	//
	// Deprecated: Marked as deprecated in attestation/v1/crafting_state.proto.
	Body string `protobuf:"bytes,3,opt,name=body,proto3" json:"body,omitempty"`
	// Base64 representation of run scripts. It might be empty if there is a FQDN reference to the policy
	Sources []string `protobuf:"bytes,12,rep,name=sources,proto3" json:"sources,omitempty"`
	// fully qualified reference to the policy
	// i.e
	// http://my-domain.com/foo.yaml
	// file://foo.yaml
	// chainloop://my-provider.com/foo@sha256:1234
	// NOTE: embedded policies will not have a reference
	// Deprecated: use policy_reference instead
	//
	// Deprecated: Marked as deprecated in attestation/v1/crafting_state.proto.
	ReferenceDigest string `protobuf:"bytes,10,opt,name=reference_digest,json=referenceDigest,proto3" json:"reference_digest,omitempty"`
	// Deprecated: Marked as deprecated in attestation/v1/crafting_state.proto.
	ReferenceName string            `protobuf:"bytes,11,opt,name=reference_name,json=referenceName,proto3" json:"reference_name,omitempty"`
	Description   string            `protobuf:"bytes,5,opt,name=description,proto3" json:"description,omitempty"`
	Annotations   map[string]string `` /* 163-byte string literal not displayed */
	// The policy violations, if any
	Violations []*PolicyEvaluation_Violation `protobuf:"bytes,4,rep,name=violations,proto3" json:"violations,omitempty"`
	// arguments, as they come from the policy attachment
	With map[string]string `` /* 149-byte string literal not displayed */
	// material type, if any, of the evaluated policy
	Type v1.CraftingSchema_Material_MaterialType `protobuf:"varint,8,opt,name=type,proto3,enum=workflowcontract.v1.CraftingSchema_Material_MaterialType" json:"type,omitempty"`
	// whether this evaluation was skipped or not (because of an invalid input, for example)
	Skipped bool `protobuf:"varint,13,opt,name=skipped,proto3" json:"skipped,omitempty"`
	// Evaluation messages, intended to communicate evaluation errors (invalid input)
	SkipReasons []string `protobuf:"bytes,14,rep,name=skip_reasons,json=skipReasons,proto3" json:"skip_reasons,omitempty"`
	// Group this evaluated policy belongs to, if any
	PolicyReference *PolicyEvaluation_Reference `protobuf:"bytes,15,opt,name=policy_reference,json=policyReference,proto3" json:"policy_reference,omitempty"`
	GroupReference  *PolicyEvaluation_Reference `protobuf:"bytes,16,opt,name=group_reference,json=groupReference,proto3" json:"group_reference,omitempty"`
	// List of requirements this policy contributes to satisfy
	Requirements []string `protobuf:"bytes,17,rep,name=requirements,proto3" json:"requirements,omitempty"`
	// Raw inputs and outputs from the policy engine, preserved for debugging.
	RawResults []*PolicyEvaluation_RawResult `protobuf:"bytes,18,rep,name=raw_results,json=rawResults,proto3" json:"raw_results,omitempty"`
	// contains filtered or unexported fields
}

type PolicyEvaluation_RawResult struct {

	// Input data provided to the policy engine
	Input []byte `protobuf:"bytes,1,opt,name=input,proto3" json:"input,omitempty"`
	// Output data returned by the policy engine
	Output []byte `protobuf:"bytes,2,opt,name=output,proto3" json:"output,omitempty"`
	// contains filtered or unexported fields
}

type PolicyEvaluation_Reference struct {
	Name    string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	Digest  string `protobuf:"bytes,2,opt,name=digest,proto3" json:"digest,omitempty"`
	Uri     string `protobuf:"bytes,3,opt,name=uri,proto3" json:"uri,omitempty"`
	OrgName string `protobuf:"bytes,4,opt,name=org_name,json=orgName,proto3" json:"org_name,omitempty"`
	// contains filtered or unexported fields
}

type PolicyEvaluation_Violation struct {
	Subject string `protobuf:"bytes,1,opt,name=subject,proto3" json:"subject,omitempty"`
	Message string `protobuf:"bytes,2,opt,name=message,proto3" json:"message,omitempty"`
	// contains filtered or unexported fields
}

type ProjectVersion struct {
	Version string `protobuf:"bytes,1,opt,name=version,proto3" json:"version,omitempty"`
	// if it's pre-release
	Prerelease     bool `protobuf:"varint,2,opt,name=prerelease,proto3" json:"prerelease,omitempty"`
	MarkAsReleased bool `protobuf:"varint,3,opt,name=mark_as_released,json=markAsReleased,proto3" json:"mark_as_released,omitempty"`
	// contains filtered or unexported fields
}

type ResourceDescriptor struct {
	Name             string            `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	Uri              string            `protobuf:"bytes,2,opt,name=uri,proto3" json:"uri,omitempty"`
	Digest           map[string]string `` /* 153-byte string literal not displayed */
	Content          []byte            `protobuf:"bytes,4,opt,name=content,proto3" json:"content,omitempty"`
	DownloadLocation string            `protobuf:"bytes,5,opt,name=download_location,json=downloadLocation,proto3" json:"download_location,omitempty"`
	MediaType        string            `protobuf:"bytes,6,opt,name=media_type,json=mediaType,proto3" json:"media_type,omitempty"`
	// Per the Struct protobuf spec, this type corresponds to
	// a JSON Object, which is truly a map<string, Value> under the hood.
	// So, the Struct a) is still consistent with our specification for
	// the `annotations` field, and b) has native support in some language
	// bindings making their use easier in implementations.
	// See: https://pkg.go.dev/google.golang.org/protobuf/types/known/structpb#Struct
	Annotations *structpb.Struct `protobuf:"bytes,7,opt,name=annotations,proto3" json:"annotations,omitempty"`
	// contains filtered or unexported fields
}

type RunnerEnvironment struct {

	// Workflow file path that was used during build
	WorkflowFilePath string `protobuf:"bytes,1,opt,name=workflow_file_path,json=workflowFilePath,proto3" json:"workflow_file_path,omitempty"`
	// Runner environment name, i.e. github-hosted
	Environment string `protobuf:"bytes,2,opt,name=environment,proto3" json:"environment,omitempty"`
	// Whether the runner is authenticated, i.e. via the OIDC token
	Authenticated bool `protobuf:"varint,3,opt,name=authenticated,proto3" json:"authenticated,omitempty"`
	// Runner type
	Type v1.CraftingSchema_Runner_RunnerType `protobuf:"varint,4,opt,name=type,proto3,enum=workflowcontract.v1.CraftingSchema_Runner_RunnerType" json:"type,omitempty"`
	// Runner URL
	Url string `protobuf:"bytes,5,opt,name=url,proto3" json:"url,omitempty"`
	// contains filtered or unexported fields
}

type WorkflowMetadata struct {
	Name    string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	Project string `protobuf:"bytes,2,opt,name=project,proto3" json:"project,omitempty"`
	// kept for backwards compatibility with remote state storage
	//
	// Deprecated: Marked as deprecated in attestation/v1/crafting_state.proto.
	ProjectVersion string `protobuf:"bytes,9,opt,name=project_version,json=projectVersion,proto3" json:"project_version,omitempty"`
	// project version
	Version        *ProjectVersion `protobuf:"bytes,10,opt,name=version,proto3" json:"version,omitempty"`
	Team           string          `protobuf:"bytes,3,opt,name=team,proto3" json:"team,omitempty"`
	WorkflowId     string          `protobuf:"bytes,5,opt,name=workflow_id,json=workflowId,proto3" json:"workflow_id,omitempty"`
	WorkflowRunId  string          `protobuf:"bytes,6,opt,name=workflow_run_id,json=workflowRunId,proto3" json:"workflow_run_id,omitempty"` // Not required since we might be doing a dry-run
	SchemaRevision string          `protobuf:"bytes,7,opt,name=schema_revision,json=schemaRevision,proto3" json:"schema_revision,omitempty"`
	// contract name (contract version is "schema_revision")
	ContractName string `protobuf:"bytes,11,opt,name=contract_name,json=contractName,proto3" json:"contract_name,omitempty"`
	// organization name
	Organization string `protobuf:"bytes,8,opt,name=organization,proto3" json:"organization,omitempty"`
	// contains filtered or unexported fields
}