attestation

type AttestationImage struct {
	Layers []AttestationLayer
	Image  v1.Image
}

type AttestationLayer struct {
	Statement   *intoto.Statement
	Layer       v1.Layer
	MediaType   types.MediaType
	Annotations map[string]string
}

type AttestationManifest struct {
	Descriptor        v1.Descriptor
	Attestation       AttestationImage
	MediaType         types.MediaType
	Annotations       map[string]string
	Digest            v1.Hash
	SubjectDescriptor *v1.Descriptor
}

type DockerDsseExtension struct {
	Tl DockerTlExtension `json:"tl"`
}

type DockerTlExtension struct {
	Kind string `json:"kind"`
	Data any    `json:"data"`
}

type Envelope struct {
	PayloadType string      `json:"payloadType"`
	Payload     string      `json:"payload"`
	Signatures  []Signature `json:"signatures"`
}

type Extension struct {
	Kind string              `json:"kind"`
	Ext  DockerDsseExtension `json:"ext"`
}

type KeyMetadata struct {
	ID            string     `json:"id"`
	PEM           string     `json:"key"`
	From          time.Time  `json:"from"`
	To            *time.Time `json:"to"`
	Status        string     `json:"status"`
	SigningFormat string     `json:"signing-format"`
	Distrust      bool       `json:"distrust,omitempty"`
}

type Keys []KeyMetadata

type KeysMap map[string]KeyMetadata

type Signature struct {
	KeyID     string    `json:"keyid"`
	Sig       string    `json:"sig"`
	Extension Extension `json:"extension"`
}

type SignedAttestationImage struct {
	Image               v1.Image
	Descriptor          *v1.Descriptor
	AttestationManifest AttestationManifest
}

type SigningOptions struct {
	// replace unsigned statements with signed attestations
	Replace bool
	// don't log to the configured transparency log
	SkipTL bool
	// don't add OCI subject field to attestation image
	SkipSubject bool
}

type VSAInputAttestation struct {
	Digest    map[string]string `json:"digest"`
	MediaType string            `json:"mediaType"`
}

type VSAPolicy struct {
	URI string `json:"uri"`
}

type VSAPredicate struct {
	Verifier           VSAVerifier           `json:"verifier"`
	TimeVerified       string                `json:"timeVerified"`
	ResourceUri        string                `json:"resourceUri"`
	Policy             VSAPolicy             `json:"policy"`
	InputAttestations  []VSAInputAttestation `json:"inputAttestations"`
	VerificationResult string                `json:"verificationResult"`
	VerifiedLevels     []string              `json:"verifiedLevels"`
}

type VSAVerifier struct {
	ID string `json:"id"`
}

type VerifyOptions struct {
	Keys   []KeyMetadata `json:"keys"`
	SkipTL bool          `json:"skip_tl"`
}