attest

type Attester struct {
	Options AttesterOptions
	// contains filtered or unexported fields
}

type AttesterOptions struct {
	// Initialize dynamic notes fetcher and storer
	InitNotesCollector bool

	// Initialize attestations store collector and storer
	InitGHCollector bool

	// Additional read repositories
	Repos []string

	// Times to retry fetching attestations
	Retries uint8
}

type BndVerifier struct {
	Options VerificationOptions
}

type VerificationOptions struct {
	ExpectedIssuer string
	ExpectedSan    string

	// AlternateSans lists additional signer identities accepted when
	// verifying attestations. It carries the pre-rename workflow identity
	// while repositories still have attestations signed with it.
	//
	// See https://github.com/slsa-framework/source-tool/issues/255
	AlternateSans []string
}

type Verifier interface {
	Verify(data string) (*verify.VerificationResult, error)

	// VerifyEnvelope checks the cryptographic signature of a parsed
	// attestation envelope and ensures the signer matches the expected
	// identity. Envelopes that carry no verifiable signature (eg bare
	// statements) must return an error.
	VerifyEnvelope(env attestation.Envelope) error
}