verifiers

type Registry struct {
	// contains filtered or unexported fields
}

type Verifier struct {
	// ID is the verifier id as VSAs record it in verifier.id.
	ID string `yaml:"id"`
	// IDMatch is how ID is compared with verifier.id; exact by default.
	IDMatch builders.IDMatch `yaml:"idMatch,omitempty"`
	// Title names the verifier for people.
	Title string `yaml:"title,omitempty"`
	// Description explains what the verifier is and how it is bound.
	Description string `yaml:"description,omitempty"`
	// Issuer is the OIDC issuer of the verifier's signing certificate.
	// With Signer unset, the signer identity is derived from it and
	// ID: a sigstore identity from Issuer whose subject starts with
	// ID followed by a slash — any workflow of the repository the id
	// names, for verifiers whose id is their repository URL.
	Issuer string `yaml:"issuer,omitempty"`
	// Signer is the identity spec (see sapi.NewIdentityFromSpec) the
	// VSA must be signed by, when it cannot be derived from Issuer and
	// ID. Naming the exact workflow is the stronger binding.
	Signer string `yaml:"signer,omitempty"`
	// Ref constrains the ref carried by the signer identity; any by
	// default.
	Ref builders.RefPolicy `yaml:"ref,omitempty"`
	// contains filtered or unexported fields
}