client

type Client struct {
	// contains filtered or unexported fields
}

type SubmitRequest struct {
	// SBOM is the raw (un-encoded) SBOM document. It is base64-encoded on the wire.
	SBOM []byte
	// ImageRef is the digest-pinned image reference (repo@sha256:…), optional.
	ImageRef string
	// Version is the image tag (e.g. "v1.20.2"), optional.
	Version string
	// Labels are tenant grouping labels (e.g. "team-x", "prod"), optional.
	Labels []string
	// Attestation is the raw (un-encoded) sigstore/cosign bundle, optional. When
	// present it is base64-encoded on the wire; the service verifies it (if a
	// trust policy is configured) and reports the outcome in
	// SubmitResponse.VerificationStatus.
	Attestation []byte
}

type SubmitResponse struct {
	SBOMID   string `json:"sbom_id"`
	ImageRef string `json:"image_ref"`
	Digest   string `json:"digest"`
	Format   string `json:"format"`
	Existing bool   `json:"existing"`
	// VerificationStatus is the attestation outcome: unverified | verified | failed.
	VerificationStatus string `json:"verification_status"`
}