attest

package

Go to main page

Versions in this module

v0

v0.7.1

Oct 3, 2026

Changes in this version

+ const ExpectedSanPrefix

+ const LegacyPocSan

+ const LegacyPocVsaVerifierId

+ const LegacySourceActionsSan

+ const LegacySourceActionsVsaVerifierId

+ var AcceptedVsaVerifierIds = []string

+ var ProvenancePredicateTypes = []attestation.PredicateType

+ var VSAPredicateTypes = []attestation.PredicateType

+ func IsAcceptedVsaVerifierId(id string) bool

type Attester

+ func (a *Attester) FetchRevisionAttestations(ctx context.Context, branch *models.Branch, commit *models.Commit, ...) ([]FetchedEnvelope, error)

+ type FetchedEnvelope struct

+ Data []byte

+ PredicateType string

+ Raw []byte

+ VerifyErr error

type VerificationOptions

+ ExpectedSanPrefix string

+ func (vo *VerificationOptions) String() string

v0.7.0

Jul 8, 2026

Changes in this version

+ func WithAuthenticator(athn *auth.Authenticator) optFn

+ func WithBackend(b models.VcsBackend) optFn

+ func WithGithubCollector(yesno bool) optFn

+ func WithNotesCollector(yesno bool) optFn

+ func WithRepository(repos ...string) optFn

+ func WithRetries(r uint8) optFn

+ func WithVerifier(vf Verifier) optFn

+ type Attester struct

+ Options AttesterOptions

+ func NewAttester(fn ...optFn) (*Attester, error)

+ func (a *Attester) CreateSourceProvenance(ctx context.Context, branch *models.Branch, commit *models.Commit) (*intoto.Statement, error)

+ func (a *Attester) CreateTagProvenance(ctx context.Context, branch *models.Branch, tag *models.Tag, actor string) (*intoto.Statement, error)

+ func (a *Attester) GetRevisionProvenance(ctx context.Context, branch *models.Branch, commit *models.Commit) (*provenance.SourceProvenancePred, error)

+ func (a *Attester) GetRevisionVSA(ctx context.Context, branch *models.Branch, revision models.Revision) (attestation.Envelope, *vsa.VerificationSummary, error)

+ func (a *Attester) Validate() error

+ type AttesterOptions struct

+ InitGHCollector bool

+ InitNotesCollector bool

+ Repos []string

+ Retries uint8

type BndVerifier

+ func (bv *BndVerifier) VerifyEnvelope(env attestation.Envelope) error

type VerificationOptions

+ AlternateSans []string

type Verifier

+ VerifyEnvelope func(env attestation.Envelope) error

v0.6.3

Aug 12, 2025

v0.6.2

Aug 6, 2025

Changes in this version

+ const ExpectedIssuer

+ const ExpectedSan

+ const OldExpectedSan

+ const VsaPredicateType

+ const VsaVerifierId

+ var DefaultVerifierOptions = VerificationOptions

+ func CreateUnsignedSourceVsa(repoUri, ref, commit string, verifiedLevels slsa.SourceVerifiedLevels, ...) (string, error)

+ func Debugf(format string, args ...any)

+ func DoesSubjectIncludeCommit(statement *spb.Statement, commit string) bool

+ func GetSourceProvPred(statement *spb.Statement) (*provenance.SourceProvenancePred, error)

+ func GetSourceRefsForCommit(vsaStatement *spb.Statement, commit string) ([]string, error)

+ func GetSubjectForCommit(statement *spb.Statement, commit string) *spb.ResourceDescriptor

+ func GetTagProvPred(statement *spb.Statement) (*provenance.TagProvenancePred, error)

+ func GetVsa(ctx context.Context, ghc *ghcontrol.GitHubConnection, verifier Verifier, ...) (*spb.Statement, *vpb.VerificationSummary, error)

+ func Sign(data string) (string, error)

+ func StatementToString(stmt *spb.Statement) string

+ type BndVerifier struct

+ Options VerificationOptions

+ func NewBndVerifier(options VerificationOptions) *BndVerifier

+ func (bv *BndVerifier) Verify(data string) (*verify.VerificationResult, error)

+ type BundleReader struct

+ func NewBundleReader(reader *bufio.Reader, verifier Verifier) *BundleReader

+ func (br *BundleReader) ReadStatement(matcher StatementMatcher) (*spb.Statement, error)

+ type ProvenanceAttestor struct

+ func NewProvenanceAttestor(gh_connection *ghcontrol.GitHubConnection, verifier Verifier) *ProvenanceAttestor

+ func (pa ProvenanceAttestor) CreateSourceProvenance(ctx context.Context, prevAttPath, commit, prevCommit, ref string) (*spb.Statement, error)

+ func (pa ProvenanceAttestor) CreateTagProvenance(ctx context.Context, commit, ref, actor string) (*spb.Statement, error)

+ func (pa ProvenanceAttestor) GetProvenance(ctx context.Context, commit, ref string) (*spb.Statement, *provenance.SourceProvenancePred, error)

+ type StatementMatcher func(*spb.Statement) bool

+ func MatchesTypeAndCommit(predicateType, commit string) StatementMatcher

+ func MatchesTypeCommitAndRef(predicateType, commit, targetRef string) StatementMatcher

+ type VerificationOptions struct

+ ExpectedIssuer string

+ ExpectedSan string

+ type Verifier interface

+ Verify func(data string) (*verify.VerificationResult, error)

+ func GetDefaultVerifier() Verifier

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL