vsa

type Dependency struct {
	Name          string            `json:"name"`
	Digest        map[string]string `json:"digest"`
	URI           string            `json:"uri,omitempty"`
	VerifiedLevel string            `json:"verifiedLevel,omitempty"`
}

type DigestSet map[string]map[string]bool

type GenerateOptions struct {
	ArtifactDigest    string
	VSASubjects       []VSASubject
	InputAttestations []ResourceDescriptor
	AttestationTypes  []string
	Signatures        []oci.Signature
	PolicyURI         string
	VSAOutput         string
	PolicyBundlePath  string
	PolicySchemasPath string
	PolicyDataPath    string
	Quiet             bool
	Version           string
	OpaVersion        string
}

type ResourceDescriptor struct {
	URI    string            `json:"uri,omitempty"`
	Digest map[string]string `json:"digest,omitempty"`
}

type SLSATrackLevels struct {
	BuildTrack      int
	DependencyTrack int
	SourceTrack     int
}

type SourceVSAOptions struct {
	// RepoURI is the source repository (becomes resourceUri and subject name).
	RepoURI string
	// Commit is the verified git revision SHA (becomes the subject gitCommit digest).
	Commit string
	// SourceLevel is the highest SLSA_SOURCE_LEVEL_n the evidence supports.
	SourceLevel string
	// AdditionalLevels are non-numbered source-track assertions the verifier can
	// vouch for (e.g. a review-control annotation). These sit alongside the
	// numbered level in verifiedLevels per the source-track VSA spec, which
	// allows additional properties.
	AdditionalLevels []string
	// Passed is the overall verification result.
	Passed bool
	// PolicyURI identifies the policy the verification was performed against.
	PolicyURI string
	// PolicyDigest is the optional digest of that policy.
	PolicyDigest map[string]string
	// InputAttestations are the bundles this VSA summarizes.
	InputAttestations []ResourceDescriptor
	// AdditionalVerifiers records the verifying tool versions.
	AdditionalVerifiers map[string]string
}

type VSA struct {
	Type          string                 `json:"_type"`
	PredicateType string                 `json:"predicateType"`
	Subject       []VSASubject           `json:"subject"`
	Predicate     VSAPredicate           `json:"predicate"`
	Metadata      map[string]interface{} `json:"metadata,omitempty"`
}

type VSAError struct {
	Type    string
	Field   string
	Message string
	Cause   error
}

type VSALevel struct {
	Level string `json:"level"`           // e.g., "SLSA_BUILD_LEVEL_3"
	Track string `json:"track,omitempty"` // e.g., "BUILD", "SOURCE"
}

type VSAOptions struct {
	Subjects            []VSASubject         `json:"subjects,omitempty"`
	InputAttestations   []ResourceDescriptor `json:"inputAttestations,omitempty"`
	PolicyDigest        map[string]string    `json:"policyDigest,omitempty"`
	Dependencies        []Dependency         `json:"dependencies,omitempty"`
	AdditionalVerifiers map[string]string    `json:"additionalVerifiers,omitempty"`
}

type VSAPolicy struct {
	Content string            `json:"content,omitempty"` // Policy content (e.g., Datalog, Rego)
	URI     string            `json:"uri,omitempty"`     // Policy URI
	Digest  map[string]string `json:"digest,omitempty"`  // Policy digest
}

type VSAPredicate struct {
	Verifier           VSAVerifier          `json:"verifier"`
	TimeVerified       string               `json:"timeVerified"`
	ResourceURI        string               `json:"resourceUri"`
	Policy             VSAPolicy            `json:"policy"`
	InputAttestations  []ResourceDescriptor `json:"inputAttestations,omitempty"`
	VerificationResult string               `json:"verificationResult"`
	VerifiedLevels     []string             `json:"verifiedLevels,omitempty"`
	DependencyLevels   map[string]uint64    `json:"dependencyLevels,omitempty"`
	SlsaVersion        string               `json:"slsaVersion,omitempty"`
}

type VSASubject struct {
	URI    string            `json:"uri"`
	Digest map[string]string `json:"digest,omitempty"`
}

type VSAVerifier struct {
	ID      string            `json:"id"`
	Version map[string]string `json:"version,omitempty"`
}