verification

type ErrorNoApplicableTrustPolicy struct {
	// contains filtered or unexported fields
}

type ErrorSignatureRetrievalFailed struct {
	// contains filtered or unexported fields
}

type ErrorVerificationFailed struct {
	// contains filtered or unexported fields
}

type ErrorVerificationInconclusive struct {
	// contains filtered or unexported fields
}

type PolicyDocument struct {
	// Version of the policy document
	Version string `json:"version"`
	// TrustPolicies include each policy statement
	TrustPolicies []TrustPolicy `json:"trustPolicies"`
}

type SignatureVerification struct {
	Level    string            `json:"level"`
	Override map[string]string `json:"override,omitempty"`
}

type SignatureVerificationOutcome struct {
	// SignerInfo contains the details of the digital signature and associated metadata
	SignerInfo *nsigner.SignerInfo
	// VerificationLevel describes what verification level was used for performing signature verification
	VerificationLevel *VerificationLevel
	// VerificationResults contains the verifications performed on the signature and their results
	VerificationResults []*VerificationResult
	// SignedAnnotations contains arbitrary metadata relating to the target artifact that was signed
	SignedAnnotations map[string]string
	// Error that caused the verification to fail (if it fails)
	Error error
}

type TrustPolicy struct {
	// Name of the policy statement
	Name string `json:"name"`
	// RegistryScopes that this policy statement affects
	RegistryScopes []string `json:"registryScopes"`
	// SignatureVerification setting for this policy statement
	SignatureVerification SignatureVerification `json:"signatureVerification"`
	// TrustStores this policy statement uses
	TrustStores []string `json:"trustStores,omitempty"`
	// TrustedIdentities this policy statement pins
	TrustedIdentities []string `json:"trustedIdentities,omitempty"`
}

type TrustStorePrefix string

type VerificationAction string

type VerificationLevel struct {
	Name            string
	VerificationMap map[VerificationType]VerificationAction
}

type VerificationResult struct {
	// Success is set to true if the verification was successful
	Success bool
	// Type of verification that is performed
	Type VerificationType
	// Action is the intended action for the given verification type as defined in the trust policy
	Action VerificationAction
	// Err is set if there are any errors during the verification process
	Error error
}

type VerificationType string

type Verifier struct {
	PolicyDocument *PolicyDocument
	Repository     registry.Repository
	PathManager    *dir.PathManager
	PluginManager  pluginManager
}

type X509TrustStore struct {
	Name         string
	Prefix       string
	Path         string
	Certificates []*x509.Certificate
}