Documentation
¶
Index ¶
Constants ¶
const ( // Make it visible elsewhere PredicateSLSAProvenance = v02.PredicateSLSAProvenance )
const ( // Make it visible elsewhere PredicateSLSAProvenanceV1 = v1.PredicateSLSAProvenance )
const (
PredicateSpdxDocument = "https://spdx.dev/Document"
)
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Attestation ¶
type Attestation interface {
Type() string
PredicateType() string
Statement() []byte
Signatures() []signature.EntitySignature
Subject() []in_toto.Subject
}
Attestation holds the raw attestation data, usually fetched from the signature envelope's payload; statement of a particular type and any signing information.
func ProvenanceFromSignature ¶
func ProvenanceFromSignature(sig oci.Signature) (Attestation, error)
ProvenanceFromSignature parses an attestation layer from the provided OCI layer. Expects that the layer contains DSSE JSON with an embedded attestation of some type or other.
func SLSAProvenanceFromSignature ¶
func SLSAProvenanceFromSignature(sig oci.Signature) (Attestation, error)
SLSAProvenanceFromSignature parses the SLSA Provenance v0.2 from the provided OCI layer. Expects that the layer contains DSSE JSON with the embedded SLSA Provenance v0.2 payload.
func SLSAProvenanceFromSignatureV1 ¶ added in v0.8.79
func SLSAProvenanceFromSignatureV1(sig oci.Signature) (Attestation, error)
SLSAProvenanceFromSignatureV1 parses the SLSA Provenance v1 from the provided OCI layer. Expects that the layer contains DSSE JSON with the embedded SLSA Provenance v1 payload.