provenance

Documentation

Index

• func GenerateAttestation(workflow *github.Workflow, workflowRun *github.WorkflowRun, ...) (intoto.ProvenanceStatement, error)
• func GetBuildLogs(log_url *url.URL) ([]byte, error)
• func GetBuildLogsURL(ctx context.Context, client *github.Client, org, repo string) (*url.URL, error)
• func GetCurrentWorkflowRunAndBuildJob(ctx context.Context, client *github.Client, org string, repo string, ...) (*github.Workflow, *github.WorkflowRun, *github.WorkflowJob, error)

Functions

func GenerateAttestation

func GenerateAttestation(workflow *github.Workflow, workflowRun *github.WorkflowRun, job *github.WorkflowJob, digest string) (intoto.ProvenanceStatement, error)

GenerateAttestation translates workflow run logs into a SLSA provenance attestation. Spec: https://slsa.dev/provenance/v0.1

func GetBuildLogs

func GetBuildLogs(log_url *url.URL) ([]byte, error)

func GetBuildLogsURL

func GetBuildLogsURL(ctx context.Context, client *github.Client, org, repo string) (*url.URL, error)

func GetCurrentWorkflowRunAndBuildJob

func GetCurrentWorkflowRunAndBuildJob(ctx context.Context, client *github.Client, org string, repo string, runId int64) (*github.Workflow, *github.WorkflowRun, *github.WorkflowJob, error)