Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func VerifySBOM ¶
func VerifySBOM(ctx context.Context, pluginName, version string, opts SBOMCheckOptions) error
VerifySBOM downloads and validates the SBOM for a plugin release. Returns nil if SBOM is valid, absent, or check is skipped/unreachable. Returns error only when a response WAS obtained and it fails schema validation — i.e. something claiming to be an SBOM is actually malformed, which is the one case that indicates real tampering or corruption rather than mere absence.
Types ¶
type SBOMCheckOptions ¶
type SBOMCheckOptions struct {
SkipCheck bool // true when this plugin's SBOM cannot live at the lookup source
Version string // plugin version to verify
// SkipReason overrides the logged reason for SkipCheck. Defaults to the
// air-gapped-install message when empty, so existing callers (only the
// --skip-sbom-check flag) are unaffected.
SkipReason string
}
SBOMCheckOptions controls SBOM verification behavior.
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
signaturetest
Package signaturetest gives tests a throwaway release key and swaps the compiled-in key table and floor, restoring both on t.Cleanup.
|
Package signaturetest gives tests a throwaway release key and swaps the compiled-in key table and floor, restoring both on t.Cleanup. |
Click to show internal directories.
Click to hide internal directories.