attestation

func BundleFromDSSEEnvelope ¶ added in v0.160.0

func BundleFromDSSEEnvelope(dsseEnvelope *dsse.Envelope) (*protobundle.Bundle, error)

func DSSEEnvelopeFromBundle ¶ added in v0.160.0

func DSSEEnvelopeFromBundle(bundle *protobundle.Bundle) *dsse.Envelope

DSSEEnvelopeFromBundle Extracts a DSSE envelope from a Sigstore bundle (Sigstore bundles have their own protobuf implementation for DSSE)

func DSSEEnvelopeFromBundleBytes ¶ added in v1.93.4

func DSSEEnvelopeFromBundleBytes(bundle []byte) (*dsse.Envelope, error)

DSSEEnvelopeFromBundleBytes extracts a DSSE envelope from the protojson-encoded bytes of a Sigstore bundle. It validates that the bundle carries a DSSE envelope with at least one signature, since callers (and DSSEEnvelopeFromBundle) assume that invariant.

func FixSignatureInBundle ¶ added in v0.179.0

func FixSignatureInBundle(bundle *protobundle.Bundle)

FixSignatureInBundle removes any additional base64 encoding from the signature in the bundle. Kept for backward compatibility with attestations stored before the fix for https://github.com/chainloop-dev/chainloop/issues/1832, whose signatures are base64-encoded twice. New bundles produced by BundleFromDSSEEnvelope already carry a properly decoded signature.

func JSONEnvelopeWithDigest ¶

func JSONEnvelopeWithDigest(envelope *dsse.Envelope) ([]byte, cr_v1.Hash, error)

JSONEnvelopeWithDigest returns the JSON content of the envelope and its digest.