Directories
¶
| Path | Synopsis |
|---|---|
|
Package attestation provides a Verifier object that orchestrates loading, signature verification, and per-predicate-type semantic verification of in-toto attestations.
|
Package attestation provides a Verifier object that orchestrates loading, signature verification, and per-predicate-type semantic verification of in-toto attestations. |
|
builders
Package builders holds the registry of build platforms the verifier can bind to their signing identity: for each known builder, who must have signed the provenance for its builder.id to count as proven rather than merely claimed.
|
Package builders holds the registry of build platforms the verifier can bind to their signing identity: for each known builder, who must have signed the provenance for its builder.id to count as proven rather than merely claimed. |
|
predicate
Package predicate registers SLSA-only attestation.PredicateParser implementations as the collector's global predicate parser registry.
|
Package predicate registers SLSA-only attestation.PredicateParser implementations as the collector's global predicate parser registry. |
|
slsafakes
Code generated by counterfeiter.
|
Code generated by counterfeiter. |
|
verifiers
Package verifiers holds the registry of VSA issuers the verifier can bind to their signing identity: for each known verifier.id, who must have signed the VSA for the id to count as proven rather than merely claimed.
|
Package verifiers holds the registry of VSA issuers the verifier can bind to their signing identity: for each known verifier.id, who must have signed the VSA for the id to count as proven rather than merely claimed. |
|
vsa
Package vsa provides a version-neutral in-memory representation of SLSA Verification Summary Attestations and the adapters that map the on-the-wire proto types (vsa/v0.2, vsa/v1, …) onto it.
|
Package vsa provides a version-neutral in-memory representation of SLSA Verification Summary Attestations and the adapters that map the on-the-wire proto types (vsa/v0.2, vsa/v1, …) onto it. |
|
Package subject binds the artifacts a caller holds to the subjects an attestation is about.
|
Package subject binds the artifacts a caller holds to the subjects an attestation is about. |
Click to show internal directories.
Click to hide internal directories.