accesscontrolv1

package
v0.6.1-do.not.use Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Aug 20, 2026 License: Apache-2.0 Imports: 5 Imported by: 0

Documentation

Index

Constants

View Source 
const Requester_Darwin_case case_Requester_SigningInfo = 5
View Source 
const Requester_Linux_case case_Requester_SigningInfo = 7
View Source 
const Requester_SigningInfo_not_set_case case_Requester_SigningInfo = 0
View Source 
const Requester_Windows_case case_Requester_SigningInfo = 6

Variables

View Source 
var (
	Decision_name = map[int32]string{
		0: "DECISION_DENY",
		1: "DECISION_ALLOW",
	}
	Decision_value = map[string]int32{
		"DECISION_DENY":  0,
		"DECISION_ALLOW": 1,
	}
)

Enum value maps for Decision.

View Source 
var (
	DarwinSigningInfo_Anchor_name = map[int32]string{
		0: "ANCHOR_NONE",
		1: "ANCHOR_AD_HOC",
		2: "ANCHOR_OTHER",
		3: "ANCHOR_APPLE_GENERIC",
		4: "ANCHOR_APPLE_PLATFORM",
	}
	DarwinSigningInfo_Anchor_value = map[string]int32{
		"ANCHOR_NONE":           0,
		"ANCHOR_AD_HOC":         1,
		"ANCHOR_OTHER":          2,
		"ANCHOR_APPLE_GENERIC":  3,
		"ANCHOR_APPLE_PLATFORM": 4,
	}
)

Enum value maps for DarwinSigningInfo_Anchor.

View Source 
var (
	WindowsSigningInfo_IntegrityLevel_name = map[int32]string{
		0:     "INTEGRITY_LEVEL_UNSPECIFIED",
		4096:  "INTEGRITY_LEVEL_LOW",
		8192:  "INTEGRITY_LEVEL_MEDIUM",
		12288: "INTEGRITY_LEVEL_HIGH",
		16384: "INTEGRITY_LEVEL_SYSTEM",
	}
	WindowsSigningInfo_IntegrityLevel_value = map[string]int32{
		"INTEGRITY_LEVEL_UNSPECIFIED": 0,
		"INTEGRITY_LEVEL_LOW":         4096,
		"INTEGRITY_LEVEL_MEDIUM":      8192,
		"INTEGRITY_LEVEL_HIGH":        12288,
		"INTEGRITY_LEVEL_SYSTEM":      16384,
	}
)

Enum value maps for WindowsSigningInfo_IntegrityLevel.

View Source 
var File_accesscontrol_v1_api_proto protoreflect.FileDescriptor

Functions

This section is empty.

Types

type AuthorizeRequest 

type AuthorizeRequest struct {
	// contains filtered or unexported fields
}

func (*AuthorizeRequest) ClearRequester 

func (x *AuthorizeRequest) ClearRequester()

func (*AuthorizeRequest) GetPatterns 

func (x *AuthorizeRequest) GetPatterns() []string

func (*AuthorizeRequest) GetRequester 

func (x *AuthorizeRequest) GetRequester() *Requester

func (*AuthorizeRequest) HasRequester 

func (x *AuthorizeRequest) HasRequester() bool

func (*AuthorizeRequest) ProtoMessage 

func (*AuthorizeRequest) ProtoMessage()

func (*AuthorizeRequest) ProtoReflect 

func (x *AuthorizeRequest) ProtoReflect() protoreflect.Message

func (*AuthorizeRequest) Reset 

func (x *AuthorizeRequest) Reset()

func (*AuthorizeRequest) SetPatterns 

func (x *AuthorizeRequest) SetPatterns(v []string)

func (*AuthorizeRequest) SetRequester 

func (x *AuthorizeRequest) SetRequester(v *Requester)

func (*AuthorizeRequest) String 

func (x *AuthorizeRequest) String() string

type AuthorizeRequest_builder 

type AuthorizeRequest_builder struct {

	// Patterns the caller wants authorized; at least one required.
	Patterns  []string
	Requester *Requester
	// contains filtered or unexported fields
}

func (AuthorizeRequest_builder) Build 

func (b0 AuthorizeRequest_builder) Build() *AuthorizeRequest

type AuthorizeResponse 

type AuthorizeResponse struct {
	// contains filtered or unexported fields
}

func (*AuthorizeResponse) ClearExpiresAt 

func (x *AuthorizeResponse) ClearExpiresAt()

func (*AuthorizeResponse) GetExpiresAt 

func (x *AuthorizeResponse) GetExpiresAt() *timestamppb.Timestamp

func (*AuthorizeResponse) HasExpiresAt 

func (x *AuthorizeResponse) HasExpiresAt() bool

func (*AuthorizeResponse) ProtoMessage 

func (*AuthorizeResponse) ProtoMessage()

func (*AuthorizeResponse) ProtoReflect 

func (x *AuthorizeResponse) ProtoReflect() protoreflect.Message

func (*AuthorizeResponse) Reset 

func (x *AuthorizeResponse) Reset()

func (*AuthorizeResponse) SetExpiresAt 

func (x *AuthorizeResponse) SetExpiresAt(v *timestamppb.Timestamp)

func (*AuthorizeResponse) String 

func (x *AuthorizeResponse) String() string

type AuthorizeResponse_builder 

type AuthorizeResponse_builder struct {

	// When the authorization expires.
	ExpiresAt *timestamppb.Timestamp
	// contains filtered or unexported fields
}

func (AuthorizeResponse_builder) Build 

func (b0 AuthorizeResponse_builder) Build() *AuthorizeResponse

type CheckAccessRequest 

type CheckAccessRequest struct {
	XXX_raceDetectHookData protoimpl.RaceDetectHookData
	XXX_presence           [1]uint32
	// contains filtered or unexported fields
}

func (*CheckAccessRequest) ClearPattern 

func (x *CheckAccessRequest) ClearPattern()

func (*CheckAccessRequest) ClearRequester 

func (x *CheckAccessRequest) ClearRequester()

func (*CheckAccessRequest) GetPattern 

func (x *CheckAccessRequest) GetPattern() string

func (*CheckAccessRequest) GetRequester 

func (x *CheckAccessRequest) GetRequester() *Requester

func (*CheckAccessRequest) HasPattern 

func (x *CheckAccessRequest) HasPattern() bool

func (*CheckAccessRequest) HasRequester 

func (x *CheckAccessRequest) HasRequester() bool

func (*CheckAccessRequest) ProtoMessage 

func (*CheckAccessRequest) ProtoMessage()

func (*CheckAccessRequest) ProtoReflect 

func (x *CheckAccessRequest) ProtoReflect() protoreflect.Message

func (*CheckAccessRequest) Reset 

func (x *CheckAccessRequest) Reset()

func (*CheckAccessRequest) SetPattern 

func (x *CheckAccessRequest) SetPattern(v string)

func (*CheckAccessRequest) SetRequester 

func (x *CheckAccessRequest) SetRequester(v *Requester)

func (*CheckAccessRequest) String 

func (x *CheckAccessRequest) String() string

type CheckAccessRequest_builder 

type CheckAccessRequest_builder struct {

	// Pattern the caller wants to resolve.
	Pattern   *string
	Requester *Requester
	// contains filtered or unexported fields
}

func (CheckAccessRequest_builder) Build 

func (b0 CheckAccessRequest_builder) Build() *CheckAccessRequest

type CheckAccessResponse 

type CheckAccessResponse struct {
	XXX_raceDetectHookData protoimpl.RaceDetectHookData
	XXX_presence           [1]uint32
	// contains filtered or unexported fields
}

func (*CheckAccessResponse) ClearDecision 

func (x *CheckAccessResponse) ClearDecision()

func (*CheckAccessResponse) GetDecision 

func (x *CheckAccessResponse) GetDecision() Decision

func (*CheckAccessResponse) HasDecision 

func (x *CheckAccessResponse) HasDecision() bool

func (*CheckAccessResponse) ProtoMessage 

func (*CheckAccessResponse) ProtoMessage()

func (*CheckAccessResponse) ProtoReflect 

func (x *CheckAccessResponse) ProtoReflect() protoreflect.Message

func (*CheckAccessResponse) Reset 

func (x *CheckAccessResponse) Reset()

func (*CheckAccessResponse) SetDecision 

func (x *CheckAccessResponse) SetDecision(v Decision)

func (*CheckAccessResponse) String 

func (x *CheckAccessResponse) String() string

type CheckAccessResponse_builder 

type CheckAccessResponse_builder struct {
	Decision *Decision
	// contains filtered or unexported fields
}

func (CheckAccessResponse_builder) Build 

func (b0 CheckAccessResponse_builder) Build() *CheckAccessResponse

type DarwinSigningInfo 

type DarwinSigningInfo struct {
	// contains filtered or unexported fields
}

macOS code-signing context (SecCode* APIs) for the requester and its process ancestry.

func (*DarwinSigningInfo) ClearLeaf 

func (x *DarwinSigningInfo) ClearLeaf()

func (*DarwinSigningInfo) ClearRoot 

func (x *DarwinSigningInfo) ClearRoot()

func (*DarwinSigningInfo) GetChain 

func (x *DarwinSigningInfo) GetChain() []*DarwinSigningInfo_ProcessNode

func (*DarwinSigningInfo) GetLeaf 

func (x *DarwinSigningInfo) GetLeaf() *DarwinSigningInfo_SigningIdentity

func (*DarwinSigningInfo) GetRoot 

func (x *DarwinSigningInfo) GetRoot() *DarwinSigningInfo_SigningIdentity

func (*DarwinSigningInfo) HasLeaf 

func (x *DarwinSigningInfo) HasLeaf() bool

func (*DarwinSigningInfo) HasRoot 

func (x *DarwinSigningInfo) HasRoot() bool

func (*DarwinSigningInfo) ProtoMessage 

func (*DarwinSigningInfo) ProtoMessage()

func (*DarwinSigningInfo) ProtoReflect 

func (x *DarwinSigningInfo) ProtoReflect() protoreflect.Message

func (*DarwinSigningInfo) Reset 

func (x *DarwinSigningInfo) Reset()

func (*DarwinSigningInfo) SetChain 

func (x *DarwinSigningInfo) SetChain(v []*DarwinSigningInfo_ProcessNode)

func (*DarwinSigningInfo) SetLeaf 

func (x *DarwinSigningInfo) SetLeaf(v *DarwinSigningInfo_SigningIdentity)

func (*DarwinSigningInfo) SetRoot 

func (x *DarwinSigningInfo) SetRoot(v *DarwinSigningInfo_SigningIdentity)

func (*DarwinSigningInfo) String 

func (x *DarwinSigningInfo) String() string

type DarwinSigningInfo_Anchor 

type DarwinSigningInfo_Anchor int32

Root the certificate chain reaches, ordered by increasing trust (gate on a minimum). 

const (
	// Unsigned.
	// buf:lint:ignore ENUM_ZERO_VALUE_SUFFIX
	DarwinSigningInfo_ANCHOR_NONE DarwinSigningInfo_Anchor = 0
	// Ad-hoc: a cdhash but no certificate (Homebrew formula, dev build).
	DarwinSigningInfo_ANCHOR_AD_HOC DarwinSigningInfo_Anchor = 1
	// Chain does not reach an Apple root.
	DarwinSigningInfo_ANCHOR_OTHER DarwinSigningInfo_Anchor = 2
	// Developer ID or Mac App Store.
	DarwinSigningInfo_ANCHOR_APPLE_GENERIC DarwinSigningInfo_Anchor = 3
	// Apple platform binaries.
	DarwinSigningInfo_ANCHOR_APPLE_PLATFORM DarwinSigningInfo_Anchor = 4
)

func (DarwinSigningInfo_Anchor) Descriptor 

func (DarwinSigningInfo_Anchor) Descriptor() protoreflect.EnumDescriptor

func (DarwinSigningInfo_Anchor) Enum 

func (x DarwinSigningInfo_Anchor) Enum() *DarwinSigningInfo_Anchor

func (DarwinSigningInfo_Anchor) Number 

func (x DarwinSigningInfo_Anchor) Number() protoreflect.EnumNumber

func (DarwinSigningInfo_Anchor) String 

func (x DarwinSigningInfo_Anchor) String() string

func (DarwinSigningInfo_Anchor) Type 

func (DarwinSigningInfo_Anchor) Type() protoreflect.EnumType

type DarwinSigningInfo_ProcessNode 

type DarwinSigningInfo_ProcessNode struct {
	XXX_raceDetectHookData protoimpl.RaceDetectHookData
	XXX_presence           [1]uint32
	// contains filtered or unexported fields
}

One process in the ancestry chain.

func (*DarwinSigningInfo_ProcessNode) ClearComm 

func (x *DarwinSigningInfo_ProcessNode) ClearComm()

func (*DarwinSigningInfo_ProcessNode) ClearExe 

func (x *DarwinSigningInfo_ProcessNode) ClearExe()

func (*DarwinSigningInfo_ProcessNode) ClearMtime 

func (x *DarwinSigningInfo_ProcessNode) ClearMtime()

func (*DarwinSigningInfo_ProcessNode) ClearPid 

func (x *DarwinSigningInfo_ProcessNode) ClearPid()

func (*DarwinSigningInfo_ProcessNode) ClearRealExe 

func (x *DarwinSigningInfo_ProcessNode) ClearRealExe()

func (*DarwinSigningInfo_ProcessNode) ClearStart 

func (x *DarwinSigningInfo_ProcessNode) ClearStart()

func (*DarwinSigningInfo_ProcessNode) ClearUid 

func (x *DarwinSigningInfo_ProcessNode) ClearUid()

func (*DarwinSigningInfo_ProcessNode) GetArgs 

func (x *DarwinSigningInfo_ProcessNode) GetArgs() []string

func (*DarwinSigningInfo_ProcessNode) GetComm 

func (x *DarwinSigningInfo_ProcessNode) GetComm() string

func (*DarwinSigningInfo_ProcessNode) GetExe 

func (x *DarwinSigningInfo_ProcessNode) GetExe() string

func (*DarwinSigningInfo_ProcessNode) GetMtime 

func (x *DarwinSigningInfo_ProcessNode) GetMtime() *timestamppb.Timestamp

func (*DarwinSigningInfo_ProcessNode) GetPid 

func (x *DarwinSigningInfo_ProcessNode) GetPid() int32

func (*DarwinSigningInfo_ProcessNode) GetRealExe 

func (x *DarwinSigningInfo_ProcessNode) GetRealExe() string

func (*DarwinSigningInfo_ProcessNode) GetStart 

func (x *DarwinSigningInfo_ProcessNode) GetStart() int64

func (*DarwinSigningInfo_ProcessNode) GetUid 

func (x *DarwinSigningInfo_ProcessNode) GetUid() int32

func (*DarwinSigningInfo_ProcessNode) HasComm 

func (x *DarwinSigningInfo_ProcessNode) HasComm() bool

func (*DarwinSigningInfo_ProcessNode) HasExe 

func (x *DarwinSigningInfo_ProcessNode) HasExe() bool

func (*DarwinSigningInfo_ProcessNode) HasMtime 

func (x *DarwinSigningInfo_ProcessNode) HasMtime() bool

func (*DarwinSigningInfo_ProcessNode) HasPid 

func (x *DarwinSigningInfo_ProcessNode) HasPid() bool

func (*DarwinSigningInfo_ProcessNode) HasRealExe 

func (x *DarwinSigningInfo_ProcessNode) HasRealExe() bool

func (*DarwinSigningInfo_ProcessNode) HasStart 

func (x *DarwinSigningInfo_ProcessNode) HasStart() bool

func (*DarwinSigningInfo_ProcessNode) HasUid 

func (x *DarwinSigningInfo_ProcessNode) HasUid() bool

func (*DarwinSigningInfo_ProcessNode) ProtoMessage 

func (*DarwinSigningInfo_ProcessNode) ProtoMessage()

func (*DarwinSigningInfo_ProcessNode) ProtoReflect 

func (x *DarwinSigningInfo_ProcessNode) ProtoReflect() protoreflect.Message

func (*DarwinSigningInfo_ProcessNode) Reset 

func (x *DarwinSigningInfo_ProcessNode) Reset()

func (*DarwinSigningInfo_ProcessNode) SetArgs 

func (x *DarwinSigningInfo_ProcessNode) SetArgs(v []string)

func (*DarwinSigningInfo_ProcessNode) SetComm 

func (x *DarwinSigningInfo_ProcessNode) SetComm(v string)

func (*DarwinSigningInfo_ProcessNode) SetExe 

func (x *DarwinSigningInfo_ProcessNode) SetExe(v string)

func (*DarwinSigningInfo_ProcessNode) SetMtime 

func (x *DarwinSigningInfo_ProcessNode) SetMtime(v *timestamppb.Timestamp)

func (*DarwinSigningInfo_ProcessNode) SetPid 

func (x *DarwinSigningInfo_ProcessNode) SetPid(v int32)

func (*DarwinSigningInfo_ProcessNode) SetRealExe 

func (x *DarwinSigningInfo_ProcessNode) SetRealExe(v string)

func (*DarwinSigningInfo_ProcessNode) SetStart 

func (x *DarwinSigningInfo_ProcessNode) SetStart(v int64)

func (*DarwinSigningInfo_ProcessNode) SetUid 

func (x *DarwinSigningInfo_ProcessNode) SetUid(v int32)

func (*DarwinSigningInfo_ProcessNode) String 

func (x *DarwinSigningInfo_ProcessNode) String() string

type DarwinSigningInfo_ProcessNode_builder 

type DarwinSigningInfo_ProcessNode_builder struct {
	Pid *int32
	// Start time in µs since epoch; with pid, survives PID reuse.
	Start *int64
	// Effective uid; -1 when unknown.
	Uid *int32
	// Kernel process name (p_comm, 16 chars max).
	Comm *string
	// Executable path (proc_pidpath).
	Exe *string
	// exe with symlinks resolved; falls back to exe.
	RealExe *string
	// Modification time of real_exe, UTC.
	Mtime *timestamppb.Timestamp
	// argv via sysctl(KERN_PROCARGS2); best-effort, self-reported.
	Args []string
	// contains filtered or unexported fields
}

func (DarwinSigningInfo_ProcessNode_builder) Build 

func (b0 DarwinSigningInfo_ProcessNode_builder) Build() *DarwinSigningInfo_ProcessNode

type DarwinSigningInfo_SigningIdentity 

type DarwinSigningInfo_SigningIdentity struct {
	XXX_raceDetectHookData protoimpl.RaceDetectHookData
	XXX_presence           [1]uint32
	// contains filtered or unexported fields
}

Verified code-signing identity of one process.

func (*DarwinSigningInfo_SigningIdentity) ClearAnchor 

func (x *DarwinSigningInfo_SigningIdentity) ClearAnchor()

func (*DarwinSigningInfo_SigningIdentity) ClearBundleName 

func (x *DarwinSigningInfo_SigningIdentity) ClearBundleName()

func (*DarwinSigningInfo_SigningIdentity) ClearCdHash 

func (x *DarwinSigningInfo_SigningIdentity) ClearCdHash()

func (*DarwinSigningInfo_SigningIdentity) ClearCommonName 

func (x *DarwinSigningInfo_SigningIdentity) ClearCommonName()

func (*DarwinSigningInfo_SigningIdentity) ClearIdentifier 

func (x *DarwinSigningInfo_SigningIdentity) ClearIdentifier()

func (*DarwinSigningInfo_SigningIdentity) ClearOrganization 

func (x *DarwinSigningInfo_SigningIdentity) ClearOrganization()

func (*DarwinSigningInfo_SigningIdentity) ClearSignedByDocker 

func (x *DarwinSigningInfo_SigningIdentity) ClearSignedByDocker()

func (*DarwinSigningInfo_SigningIdentity) ClearStatus 

func (x *DarwinSigningInfo_SigningIdentity) ClearStatus()

func (*DarwinSigningInfo_SigningIdentity) ClearTeamId 

func (x *DarwinSigningInfo_SigningIdentity) ClearTeamId()

func (*DarwinSigningInfo_SigningIdentity) GetAnchor 

func (x *DarwinSigningInfo_SigningIdentity) GetAnchor() DarwinSigningInfo_Anchor

func (*DarwinSigningInfo_SigningIdentity) GetBundleName 

func (x *DarwinSigningInfo_SigningIdentity) GetBundleName() string

func (*DarwinSigningInfo_SigningIdentity) GetCdHash 

func (x *DarwinSigningInfo_SigningIdentity) GetCdHash() string

func (*DarwinSigningInfo_SigningIdentity) GetCommonName 

func (x *DarwinSigningInfo_SigningIdentity) GetCommonName() string

func (*DarwinSigningInfo_SigningIdentity) GetIdentifier 

func (x *DarwinSigningInfo_SigningIdentity) GetIdentifier() string

func (*DarwinSigningInfo_SigningIdentity) GetOrganization 

func (x *DarwinSigningInfo_SigningIdentity) GetOrganization() string

func (*DarwinSigningInfo_SigningIdentity) GetSignedByDocker 

func (x *DarwinSigningInfo_SigningIdentity) GetSignedByDocker() bool

func (*DarwinSigningInfo_SigningIdentity) GetStatus 

func (x *DarwinSigningInfo_SigningIdentity) GetStatus() uint32

func (*DarwinSigningInfo_SigningIdentity) GetTeamId 

func (x *DarwinSigningInfo_SigningIdentity) GetTeamId() string

func (*DarwinSigningInfo_SigningIdentity) HasAnchor 

func (x *DarwinSigningInfo_SigningIdentity) HasAnchor() bool

func (*DarwinSigningInfo_SigningIdentity) HasBundleName 

func (x *DarwinSigningInfo_SigningIdentity) HasBundleName() bool

func (*DarwinSigningInfo_SigningIdentity) HasCdHash 

func (x *DarwinSigningInfo_SigningIdentity) HasCdHash() bool

func (*DarwinSigningInfo_SigningIdentity) HasCommonName 

func (x *DarwinSigningInfo_SigningIdentity) HasCommonName() bool

func (*DarwinSigningInfo_SigningIdentity) HasIdentifier 

func (x *DarwinSigningInfo_SigningIdentity) HasIdentifier() bool

func (*DarwinSigningInfo_SigningIdentity) HasOrganization 

func (x *DarwinSigningInfo_SigningIdentity) HasOrganization() bool

func (*DarwinSigningInfo_SigningIdentity) HasSignedByDocker 

func (x *DarwinSigningInfo_SigningIdentity) HasSignedByDocker() bool

func (*DarwinSigningInfo_SigningIdentity) HasStatus 

func (x *DarwinSigningInfo_SigningIdentity) HasStatus() bool

func (*DarwinSigningInfo_SigningIdentity) HasTeamId 

func (x *DarwinSigningInfo_SigningIdentity) HasTeamId() bool

func (*DarwinSigningInfo_SigningIdentity) ProtoMessage 

func (*DarwinSigningInfo_SigningIdentity) ProtoMessage()

func (*DarwinSigningInfo_SigningIdentity) ProtoReflect 

func (x *DarwinSigningInfo_SigningIdentity) ProtoReflect() protoreflect.Message

func (*DarwinSigningInfo_SigningIdentity) Reset 

func (x *DarwinSigningInfo_SigningIdentity) Reset()

func (*DarwinSigningInfo_SigningIdentity) SetAnchor 

func (x *DarwinSigningInfo_SigningIdentity) SetAnchor(v DarwinSigningInfo_Anchor)

func (*DarwinSigningInfo_SigningIdentity) SetBundleName 

func (x *DarwinSigningInfo_SigningIdentity) SetBundleName(v string)

func (*DarwinSigningInfo_SigningIdentity) SetCdHash 

func (x *DarwinSigningInfo_SigningIdentity) SetCdHash(v string)

func (*DarwinSigningInfo_SigningIdentity) SetCommonName 

func (x *DarwinSigningInfo_SigningIdentity) SetCommonName(v string)

func (*DarwinSigningInfo_SigningIdentity) SetIdentifier 

func (x *DarwinSigningInfo_SigningIdentity) SetIdentifier(v string)

func (*DarwinSigningInfo_SigningIdentity) SetOrganization 

func (x *DarwinSigningInfo_SigningIdentity) SetOrganization(v string)

func (*DarwinSigningInfo_SigningIdentity) SetSignedByDocker 

func (x *DarwinSigningInfo_SigningIdentity) SetSignedByDocker(v bool)

func (*DarwinSigningInfo_SigningIdentity) SetStatus 

func (x *DarwinSigningInfo_SigningIdentity) SetStatus(v uint32)

func (*DarwinSigningInfo_SigningIdentity) SetTeamId 

func (x *DarwinSigningInfo_SigningIdentity) SetTeamId(v string)

func (*DarwinSigningInfo_SigningIdentity) String 

func (x *DarwinSigningInfo_SigningIdentity) String() string

type DarwinSigningInfo_SigningIdentity_builder 

type DarwinSigningInfo_SigningIdentity_builder struct {

	// Team Identifier (kSecCodeInfoTeamIdentifier); unique per developer
	// account — reliable trust key.
	TeamId *string
	// Code-signing identifier (kSecCodeInfoIdentifier), typically the
	// bundle ID; pins an app within a team.
	Identifier *string
	// Leaf cert subject.O, e.g. "Docker Inc"; display only, not a trust key.
	Organization *string
	// Leaf cert subject.CN; display only.
	CommonName *string
	// Code directory hash (kSecCodeInfoUnique), hex; pins an exact build.
	CdHash *string
	// Dynamic code-signing status word (kSecCodeInfoStatus) — the kernel's
	// live view of the signature. Raw uint32 bitmask; values are fixed by
	// Apple's <Security/SecCode.h> and preserved verbatim (unknown bits
	// included). Known flags:
	//
	//	0x0000_0001 VALID    — dynamically valid; cleared on runtime tamper.
	//	0x0000_0100 HARD     — kernel refuses to page in invalid pages.
	//	0x0000_0200 KILL     — process killed if it becomes invalid.
	//	0x1000_0000 DEBUGGED — debugger attached; red flag for a secrets peer.
	Status *uint32
	// Root the certificate chain reaches.
	Anchor *DarwinSigningInfo_Anchor
	// Signature chains to Docker's signing identity.
	SignedByDocker *bool
	// App name from Info.plist (CFBundleDisplayName or CFBundleName);
	// display only.
	BundleName *string
	// contains filtered or unexported fields
}

func (DarwinSigningInfo_SigningIdentity_builder) Build 

func (b0 DarwinSigningInfo_SigningIdentity_builder) Build() *DarwinSigningInfo_SigningIdentity

type DarwinSigningInfo_builder 

type DarwinSigningInfo_builder struct {

	// Identity of the outermost recorded ancestor.
	Root *DarwinSigningInfo_SigningIdentity
	// Identity of the process that connected to the socket.
	Leaf *DarwinSigningInfo_SigningIdentity
	// Ancestry ordered root to leaf; may be a single node.
	Chain []*DarwinSigningInfo_ProcessNode
	// contains filtered or unexported fields
}

func (DarwinSigningInfo_builder) Build 

func (b0 DarwinSigningInfo_builder) Build() *DarwinSigningInfo

type Decision 

type Decision int32
const (
	// buf:lint:ignore ENUM_ZERO_VALUE_SUFFIX
	Decision_DECISION_DENY  Decision = 0
	Decision_DECISION_ALLOW Decision = 1
)

func (Decision) Descriptor 

func (Decision) Descriptor() protoreflect.EnumDescriptor

func (Decision) Enum 

func (x Decision) Enum() *Decision

func (Decision) Number 

func (x Decision) Number() protoreflect.EnumNumber

func (Decision) String 

func (x Decision) String() string

func (Decision) Type 

func (Decision) Type() protoreflect.EnumType

type LinuxSigningInfo 

type LinuxSigningInfo struct {
	// contains filtered or unexported fields
}

Sigstore (Fulcio/Rekor) context for the requesting process. A binary may have multiple signers.

func (*LinuxSigningInfo) GetSigners 

func (x *LinuxSigningInfo) GetSigners() []*LinuxSigningInfo_Signer

func (*LinuxSigningInfo) ProtoMessage 

func (*LinuxSigningInfo) ProtoMessage()

func (*LinuxSigningInfo) ProtoReflect 

func (x *LinuxSigningInfo) ProtoReflect() protoreflect.Message

func (*LinuxSigningInfo) Reset 

func (x *LinuxSigningInfo) Reset()

func (*LinuxSigningInfo) SetSigners 

func (x *LinuxSigningInfo) SetSigners(v []*LinuxSigningInfo_Signer)

func (*LinuxSigningInfo) String 

func (x *LinuxSigningInfo) String() string

type LinuxSigningInfo_Signer 

type LinuxSigningInfo_Signer struct {
	XXX_raceDetectHookData protoimpl.RaceDetectHookData
	XXX_presence           [1]uint32
	// contains filtered or unexported fields
}

One verified sigstore signature over the binary.

func (*LinuxSigningInfo_Signer) ClearBuildTrigger 

func (x *LinuxSigningInfo_Signer) ClearBuildTrigger()

func (*LinuxSigningInfo_Signer) ClearCertIdentity 

func (x *LinuxSigningInfo_Signer) ClearCertIdentity()

func (*LinuxSigningInfo_Signer) ClearCertIssuer 

func (x *LinuxSigningInfo_Signer) ClearCertIssuer()

func (*LinuxSigningInfo_Signer) ClearIntegratedTime 

func (x *LinuxSigningInfo_Signer) ClearIntegratedTime()

func (*LinuxSigningInfo_Signer) ClearRekorLogIndex 

func (x *LinuxSigningInfo_Signer) ClearRekorLogIndex()

func (*LinuxSigningInfo_Signer) ClearRunInvocationUri 

func (x *LinuxSigningInfo_Signer) ClearRunInvocationUri()

func (*LinuxSigningInfo_Signer) ClearRunnerEnvironment 

func (x *LinuxSigningInfo_Signer) ClearRunnerEnvironment()

func (*LinuxSigningInfo_Signer) ClearSourceCommit 

func (x *LinuxSigningInfo_Signer) ClearSourceCommit()

func (*LinuxSigningInfo_Signer) ClearSourceRef 

func (x *LinuxSigningInfo_Signer) ClearSourceRef()

func (*LinuxSigningInfo_Signer) ClearSourceRepo 

func (x *LinuxSigningInfo_Signer) ClearSourceRepo()

func (*LinuxSigningInfo_Signer) GetBuildTrigger 

func (x *LinuxSigningInfo_Signer) GetBuildTrigger() string

func (*LinuxSigningInfo_Signer) GetCertIdentity 

func (x *LinuxSigningInfo_Signer) GetCertIdentity() string

func (*LinuxSigningInfo_Signer) GetCertIssuer 

func (x *LinuxSigningInfo_Signer) GetCertIssuer() string

func (*LinuxSigningInfo_Signer) GetIntegratedTime 

func (x *LinuxSigningInfo_Signer) GetIntegratedTime() *timestamppb.Timestamp

func (*LinuxSigningInfo_Signer) GetRekorLogIndex 

func (x *LinuxSigningInfo_Signer) GetRekorLogIndex() int64

func (*LinuxSigningInfo_Signer) GetRunInvocationUri 

func (x *LinuxSigningInfo_Signer) GetRunInvocationUri() string

func (*LinuxSigningInfo_Signer) GetRunnerEnvironment 

func (x *LinuxSigningInfo_Signer) GetRunnerEnvironment() string

func (*LinuxSigningInfo_Signer) GetSourceCommit 

func (x *LinuxSigningInfo_Signer) GetSourceCommit() string

func (*LinuxSigningInfo_Signer) GetSourceRef 

func (x *LinuxSigningInfo_Signer) GetSourceRef() string

func (*LinuxSigningInfo_Signer) GetSourceRepo 

func (x *LinuxSigningInfo_Signer) GetSourceRepo() string

func (*LinuxSigningInfo_Signer) HasBuildTrigger 

func (x *LinuxSigningInfo_Signer) HasBuildTrigger() bool

func (*LinuxSigningInfo_Signer) HasCertIdentity 

func (x *LinuxSigningInfo_Signer) HasCertIdentity() bool

func (*LinuxSigningInfo_Signer) HasCertIssuer 

func (x *LinuxSigningInfo_Signer) HasCertIssuer() bool

func (*LinuxSigningInfo_Signer) HasIntegratedTime 

func (x *LinuxSigningInfo_Signer) HasIntegratedTime() bool

func (*LinuxSigningInfo_Signer) HasRekorLogIndex 

func (x *LinuxSigningInfo_Signer) HasRekorLogIndex() bool

func (*LinuxSigningInfo_Signer) HasRunInvocationUri 

func (x *LinuxSigningInfo_Signer) HasRunInvocationUri() bool

func (*LinuxSigningInfo_Signer) HasRunnerEnvironment 

func (x *LinuxSigningInfo_Signer) HasRunnerEnvironment() bool

func (*LinuxSigningInfo_Signer) HasSourceCommit 

func (x *LinuxSigningInfo_Signer) HasSourceCommit() bool

func (*LinuxSigningInfo_Signer) HasSourceRef 

func (x *LinuxSigningInfo_Signer) HasSourceRef() bool

func (*LinuxSigningInfo_Signer) HasSourceRepo 

func (x *LinuxSigningInfo_Signer) HasSourceRepo() bool

func (*LinuxSigningInfo_Signer) ProtoMessage 

func (*LinuxSigningInfo_Signer) ProtoMessage()

func (*LinuxSigningInfo_Signer) ProtoReflect 

func (x *LinuxSigningInfo_Signer) ProtoReflect() protoreflect.Message

func (*LinuxSigningInfo_Signer) Reset 

func (x *LinuxSigningInfo_Signer) Reset()

func (*LinuxSigningInfo_Signer) SetBuildTrigger 

func (x *LinuxSigningInfo_Signer) SetBuildTrigger(v string)

func (*LinuxSigningInfo_Signer) SetCertIdentity 

func (x *LinuxSigningInfo_Signer) SetCertIdentity(v string)

func (*LinuxSigningInfo_Signer) SetCertIssuer 

func (x *LinuxSigningInfo_Signer) SetCertIssuer(v string)

func (*LinuxSigningInfo_Signer) SetIntegratedTime 

func (x *LinuxSigningInfo_Signer) SetIntegratedTime(v *timestamppb.Timestamp)

func (*LinuxSigningInfo_Signer) SetRekorLogIndex 

func (x *LinuxSigningInfo_Signer) SetRekorLogIndex(v int64)

func (*LinuxSigningInfo_Signer) SetRunInvocationUri 

func (x *LinuxSigningInfo_Signer) SetRunInvocationUri(v string)

func (*LinuxSigningInfo_Signer) SetRunnerEnvironment 

func (x *LinuxSigningInfo_Signer) SetRunnerEnvironment(v string)

func (*LinuxSigningInfo_Signer) SetSourceCommit 

func (x *LinuxSigningInfo_Signer) SetSourceCommit(v string)

func (*LinuxSigningInfo_Signer) SetSourceRef 

func (x *LinuxSigningInfo_Signer) SetSourceRef(v string)

func (*LinuxSigningInfo_Signer) SetSourceRepo 

func (x *LinuxSigningInfo_Signer) SetSourceRepo(v string)

func (*LinuxSigningInfo_Signer) String 

func (x *LinuxSigningInfo_Signer) String() string

type LinuxSigningInfo_Signer_builder 

type LinuxSigningInfo_Signer_builder struct {

	// OIDC issuer in the Fulcio cert, e.g.
	// "https://token.actions.githubusercontent.com".
	CertIssuer *string
	// Certificate SAN — the signer's workflow identity.
	CertIdentity *string
	SourceRepo   *string
	// Git ref built, e.g. "refs/tags/v0.7.1".
	SourceRef    *string
	SourceCommit *string
	// "github-hosted" or "self-hosted".
	RunnerEnvironment *string
	// Workflow trigger event, e.g. "release".
	BuildTrigger *string
	// GitHub Actions run that produced the signature.
	RunInvocationUri *string
	// Entry's index in the Rekor transparency log.
	RekorLogIndex *int64
	// When recorded in Rekor.
	IntegratedTime *timestamppb.Timestamp
	// contains filtered or unexported fields
}

func (LinuxSigningInfo_Signer_builder) Build 

func (b0 LinuxSigningInfo_Signer_builder) Build() *LinuxSigningInfo_Signer

type LinuxSigningInfo_builder 

type LinuxSigningInfo_builder struct {
	Signers []*LinuxSigningInfo_Signer
	// contains filtered or unexported fields
}

func (LinuxSigningInfo_builder) Build 

func (b0 LinuxSigningInfo_builder) Build() *LinuxSigningInfo

type Requester 

type Requester struct {
	XXX_raceDetectHookData protoimpl.RaceDetectHookData
	XXX_presence           [1]uint32
	// contains filtered or unexported fields
}

func (*Requester) ClearAbsoluteBinaryPath 

func (x *Requester) ClearAbsoluteBinaryPath()

func (*Requester) ClearDarwin 

func (x *Requester) ClearDarwin()

func (*Requester) ClearLinux 

func (x *Requester) ClearLinux()

func (*Requester) ClearName 

func (x *Requester) ClearName()

func (*Requester) ClearPid 

func (x *Requester) ClearPid()

func (*Requester) ClearSignedByDocker 

func (x *Requester) ClearSignedByDocker()

func (*Requester) ClearSigningInfo 

func (x *Requester) ClearSigningInfo()

func (*Requester) ClearWindows 

func (x *Requester) ClearWindows()

func (*Requester) GetAbsoluteBinaryPath 

func (x *Requester) GetAbsoluteBinaryPath() string

func (*Requester) GetDarwin 

func (x *Requester) GetDarwin() *DarwinSigningInfo

func (*Requester) GetLinux 

func (x *Requester) GetLinux() *LinuxSigningInfo

func (*Requester) GetName 

func (x *Requester) GetName() string

func (*Requester) GetPid 

func (x *Requester) GetPid() int32

func (*Requester) GetSignedByDocker 

func (x *Requester) GetSignedByDocker() bool

func (*Requester) GetWindows 

func (x *Requester) GetWindows() *WindowsSigningInfo

func (*Requester) HasAbsoluteBinaryPath 

func (x *Requester) HasAbsoluteBinaryPath() bool

func (*Requester) HasDarwin 

func (x *Requester) HasDarwin() bool

func (*Requester) HasLinux 

func (x *Requester) HasLinux() bool

func (*Requester) HasName 

func (x *Requester) HasName() bool

func (*Requester) HasPid 

func (x *Requester) HasPid() bool

func (*Requester) HasSignedByDocker 

func (x *Requester) HasSignedByDocker() bool

func (*Requester) HasSigningInfo 

func (x *Requester) HasSigningInfo() bool

func (*Requester) HasWindows 

func (x *Requester) HasWindows() bool

func (*Requester) ProtoMessage 

func (*Requester) ProtoMessage()

func (*Requester) ProtoReflect 

func (x *Requester) ProtoReflect() protoreflect.Message

func (*Requester) Reset 

func (x *Requester) Reset()

func (*Requester) SetAbsoluteBinaryPath 

func (x *Requester) SetAbsoluteBinaryPath(v string)

func (*Requester) SetDarwin 

func (x *Requester) SetDarwin(v *DarwinSigningInfo)

func (*Requester) SetLinux 

func (x *Requester) SetLinux(v *LinuxSigningInfo)

func (*Requester) SetName 

func (x *Requester) SetName(v string)

func (*Requester) SetPid 

func (x *Requester) SetPid(v int32)

func (*Requester) SetSignedByDocker 

func (x *Requester) SetSignedByDocker(v bool)

func (*Requester) SetWindows 

func (x *Requester) SetWindows(v *WindowsSigningInfo)

func (*Requester) String 

func (x *Requester) String() string

func (*Requester) WhichSigningInfo 

func (x *Requester) WhichSigningInfo() case_Requester_SigningInfo

type Requester_builder 

type Requester_builder struct {
	Pid                *int32
	Name               *string
	AbsoluteBinaryPath *string
	// Signature chains to Docker's signing identity.
	SignedByDocker *bool

	// Fields of oneof xxx_hidden_SigningInfo:
	Darwin  *DarwinSigningInfo
	Windows *WindowsSigningInfo
	Linux   *LinuxSigningInfo
	// contains filtered or unexported fields
}

func (Requester_builder) Build 

func (b0 Requester_builder) Build() *Requester

type WindowsSigningInfo 

type WindowsSigningInfo struct {
	XXX_raceDetectHookData protoimpl.RaceDetectHookData
	XXX_presence           [1]uint32
	// contains filtered or unexported fields
}

Windows Authenticode context for the requesting process.

func (*WindowsSigningInfo) ClearCompanyName 

func (x *WindowsSigningInfo) ClearCompanyName()

func (*WindowsSigningInfo) ClearFileVersion 

func (x *WindowsSigningInfo) ClearFileVersion()

func (*WindowsSigningInfo) ClearIntegrity 

func (x *WindowsSigningInfo) ClearIntegrity()

func (*WindowsSigningInfo) ClearIsEv 

func (x *WindowsSigningInfo) ClearIsEv()

func (*WindowsSigningInfo) ClearIssuer 

func (x *WindowsSigningInfo) ClearIssuer()

func (*WindowsSigningInfo) ClearProductName 

func (x *WindowsSigningInfo) ClearProductName()

func (*WindowsSigningInfo) ClearSubjectCommonName 

func (x *WindowsSigningInfo) ClearSubjectCommonName()

func (*WindowsSigningInfo) ClearSubjectOrg 

func (x *WindowsSigningInfo) ClearSubjectOrg()

func (*WindowsSigningInfo) ClearThumbprintSha256 

func (x *WindowsSigningInfo) ClearThumbprintSha256()

func (*WindowsSigningInfo) ClearTrustedChain 

func (x *WindowsSigningInfo) ClearTrustedChain()

func (*WindowsSigningInfo) GetCompanyName 

func (x *WindowsSigningInfo) GetCompanyName() string

func (*WindowsSigningInfo) GetFileVersion 

func (x *WindowsSigningInfo) GetFileVersion() string

func (*WindowsSigningInfo) GetIntegrity 

func (x *WindowsSigningInfo) GetIntegrity() WindowsSigningInfo_IntegrityLevel

func (*WindowsSigningInfo) GetIsEv 

func (x *WindowsSigningInfo) GetIsEv() bool

func (*WindowsSigningInfo) GetIssuer 

func (x *WindowsSigningInfo) GetIssuer() string

func (*WindowsSigningInfo) GetProductName 

func (x *WindowsSigningInfo) GetProductName() string

func (*WindowsSigningInfo) GetSubjectCommonName 

func (x *WindowsSigningInfo) GetSubjectCommonName() string

func (*WindowsSigningInfo) GetSubjectOrg 

func (x *WindowsSigningInfo) GetSubjectOrg() string

func (*WindowsSigningInfo) GetThumbprintSha256 

func (x *WindowsSigningInfo) GetThumbprintSha256() string

func (*WindowsSigningInfo) GetTrustedChain 

func (x *WindowsSigningInfo) GetTrustedChain() bool

func (*WindowsSigningInfo) HasCompanyName 

func (x *WindowsSigningInfo) HasCompanyName() bool

func (*WindowsSigningInfo) HasFileVersion 

func (x *WindowsSigningInfo) HasFileVersion() bool

func (*WindowsSigningInfo) HasIntegrity 

func (x *WindowsSigningInfo) HasIntegrity() bool

func (*WindowsSigningInfo) HasIsEv 

func (x *WindowsSigningInfo) HasIsEv() bool

func (*WindowsSigningInfo) HasIssuer 

func (x *WindowsSigningInfo) HasIssuer() bool

func (*WindowsSigningInfo) HasProductName 

func (x *WindowsSigningInfo) HasProductName() bool

func (*WindowsSigningInfo) HasSubjectCommonName 

func (x *WindowsSigningInfo) HasSubjectCommonName() bool

func (*WindowsSigningInfo) HasSubjectOrg 

func (x *WindowsSigningInfo) HasSubjectOrg() bool

func (*WindowsSigningInfo) HasThumbprintSha256 

func (x *WindowsSigningInfo) HasThumbprintSha256() bool

func (*WindowsSigningInfo) HasTrustedChain 

func (x *WindowsSigningInfo) HasTrustedChain() bool

func (*WindowsSigningInfo) ProtoMessage 

func (*WindowsSigningInfo) ProtoMessage()

func (*WindowsSigningInfo) ProtoReflect 

func (x *WindowsSigningInfo) ProtoReflect() protoreflect.Message

func (*WindowsSigningInfo) Reset 

func (x *WindowsSigningInfo) Reset()

func (*WindowsSigningInfo) SetCompanyName 

func (x *WindowsSigningInfo) SetCompanyName(v string)

func (*WindowsSigningInfo) SetFileVersion 

func (x *WindowsSigningInfo) SetFileVersion(v string)

func (*WindowsSigningInfo) SetIntegrity 

func (x *WindowsSigningInfo) SetIntegrity(v WindowsSigningInfo_IntegrityLevel)

func (*WindowsSigningInfo) SetIsEv 

func (x *WindowsSigningInfo) SetIsEv(v bool)

func (*WindowsSigningInfo) SetIssuer 

func (x *WindowsSigningInfo) SetIssuer(v string)

func (*WindowsSigningInfo) SetProductName 

func (x *WindowsSigningInfo) SetProductName(v string)

func (*WindowsSigningInfo) SetSubjectCommonName 

func (x *WindowsSigningInfo) SetSubjectCommonName(v string)

func (*WindowsSigningInfo) SetSubjectOrg 

func (x *WindowsSigningInfo) SetSubjectOrg(v string)

func (*WindowsSigningInfo) SetThumbprintSha256 

func (x *WindowsSigningInfo) SetThumbprintSha256(v string)

func (*WindowsSigningInfo) SetTrustedChain 

func (x *WindowsSigningInfo) SetTrustedChain(v bool)

func (*WindowsSigningInfo) String 

func (x *WindowsSigningInfo) String() string

type WindowsSigningInfo_IntegrityLevel 

type WindowsSigningInfo_IntegrityLevel int32

Windows mandatory integrity level (winnt.h RIDs); higher = more privileged. 

const (
	// Untrusted, or could not be determined.
	WindowsSigningInfo_INTEGRITY_LEVEL_UNSPECIFIED WindowsSigningInfo_IntegrityLevel = 0
	// SECURITY_MANDATORY_LOW_RID (0x1000), e.g. AppContainer/sandboxed.
	WindowsSigningInfo_INTEGRITY_LEVEL_LOW WindowsSigningInfo_IntegrityLevel = 4096
	// SECURITY_MANDATORY_MEDIUM_RID (0x2000), default for standard user procs.
	WindowsSigningInfo_INTEGRITY_LEVEL_MEDIUM WindowsSigningInfo_IntegrityLevel = 8192
	// SECURITY_MANDATORY_HIGH_RID (0x3000), e.g. elevated (administrator).
	WindowsSigningInfo_INTEGRITY_LEVEL_HIGH WindowsSigningInfo_IntegrityLevel = 12288
	// SECURITY_MANDATORY_SYSTEM_RID (0x4000), e.g. services running as SYSTEM.
	WindowsSigningInfo_INTEGRITY_LEVEL_SYSTEM WindowsSigningInfo_IntegrityLevel = 16384
)

func (WindowsSigningInfo_IntegrityLevel) Descriptor 

func (WindowsSigningInfo_IntegrityLevel) Descriptor() protoreflect.EnumDescriptor

func (WindowsSigningInfo_IntegrityLevel) Enum 

func (x WindowsSigningInfo_IntegrityLevel) Enum() *WindowsSigningInfo_IntegrityLevel

func (WindowsSigningInfo_IntegrityLevel) Number 

func (x WindowsSigningInfo_IntegrityLevel) Number() protoreflect.EnumNumber

func (WindowsSigningInfo_IntegrityLevel) String 

func (x WindowsSigningInfo_IntegrityLevel) String() string

func (WindowsSigningInfo_IntegrityLevel) Type 

func (WindowsSigningInfo_IntegrityLevel) Type() protoreflect.EnumType

type WindowsSigningInfo_builder 

type WindowsSigningInfo_builder struct {

	// Chains to a trusted root and not revoked; remaining signature fields
	// are meaningful only when true.
	TrustedChain      *bool
	SubjectOrg        *string
	SubjectCommonName *string
	// Issuing CA Common Name.
	Issuer *string
	// SHA-256 of the leaf certificate, hex; strongest pin, breaks on rotation.
	ThumbprintSha256 *string
	// Extended Validation certificate (CA/Browser Forum EV policy OID).
	IsEv *bool
	// Integrity level from the peer's access token; diagnostics only,
	// never gated on.
	Integrity *WindowsSigningInfo_IntegrityLevel
	// PE VERSIONINFO (unsigned, attacker-controllable): display only,
	// never gate trust.
	CompanyName *string
	ProductName *string
	FileVersion *string
	// contains filtered or unexported fields
}

func (WindowsSigningInfo_builder) Build 

func (b0 WindowsSigningInfo_builder) Build() *WindowsSigningInfo

Source Files

View all Source files

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.