vsa

type AttestationSigner func(ctx context.Context, signer signature.SignerVerifier, ref name.Reference, att oci.Signature, opts *cosign.CheckOpts) (name.Digest, error)

type AttestationUploader func(ctx context.Context, att oci.Signature, location string) (string, error)

type Generator struct{}

type Predicate struct {
	ImageRef         string                 `json:"imageRef"`
	ValidationResult string                 `json:"validationResult"`
	Timestamp        string                 `json:"timestamp"`
	Verifier         string                 `json:"verifier"`
	PolicySource     string                 `json:"policySource"`
	Component        map[string]interface{} `json:"component"`
	RuleResults      []evaluator.Result     `json:"ruleResults"`
}

type PrivateKeyLoader func(key []byte, pass []byte) (signature.SignerVerifier, error)

type Signer struct {
	FS        afero.Fs          // for reading the VSA file
	KeyLoader PrivateKeyLoader  // injected loader
	SignFunc  AttestationSigner // injected cosign API
}

type Writer struct {
	FS            afero.Fs    // defaults to the package-level FS or afero.NewOsFs()
	TempDirPrefix string      // defaults to "vsa-"
	FilePerm      os.FileMode // defaults to 0600
}