application_snapshot_image

Documentation

Index

• type ApplicationSnapshotImage
  • func NewApplicationSnapshotImage(ctx context.Context, component app.SnapshotComponent, p policy.Policy, ...) (*ApplicationSnapshotImage, error)
  • func (a *ApplicationSnapshotImage) Attestations() []attestation.Attestation
  • func (a *ApplicationSnapshotImage) FetchImageConfig(ctx context.Context) error
  • func (a *ApplicationSnapshotImage) FetchImageFiles(ctx context.Context) error
  • func (a *ApplicationSnapshotImage) FetchParentImageConfig(ctx context.Context) error
  • func (a ApplicationSnapshotImage) GetReference() name.Reference
  • func (a *ApplicationSnapshotImage) ResolveDigest(ctx context.Context) (string, error)
  • func (a *ApplicationSnapshotImage) SetImageURL(url string) error
  • func (a *ApplicationSnapshotImage) Signatures() []signature.EntitySignature
  • func (a *ApplicationSnapshotImage) ValidateAttestationSignature(ctx context.Context) error
  • func (a ApplicationSnapshotImage) ValidateAttestationSyntax(ctx context.Context) error
  • func (a *ApplicationSnapshotImage) ValidateImageAccess(ctx context.Context) error
  • func (a *ApplicationSnapshotImage) ValidateImageSignature(ctx context.Context) error
  • func (a *ApplicationSnapshotImage) WriteInputFile(ctx context.Context) (string, []byte, error)
• type Input

Types

type ApplicationSnapshotImage

type ApplicationSnapshotImage struct {
	Evaluators []evaluator.Evaluator
	// contains filtered or unexported fields
}

ApplicationSnapshotImage represents the structure needed to evaluate an Application Snapshot Image

func NewApplicationSnapshotImage

func NewApplicationSnapshotImage(ctx context.Context, component app.SnapshotComponent, p policy.Policy, snap app.SnapshotSpec) (*ApplicationSnapshotImage, error)

NewApplicationSnapshotImage returns an ApplicationSnapshotImage struct with reference, checkOpts, and evaluator ready to use.

func (*ApplicationSnapshotImage) Attestations

func (a *ApplicationSnapshotImage) Attestations() []attestation.Attestation

Attestations returns the value of the attestations field of the ApplicationSnapshotImage struct

func (*ApplicationSnapshotImage) FetchImageConfig

func (a *ApplicationSnapshotImage) FetchImageConfig(ctx context.Context) error

func (*ApplicationSnapshotImage) FetchImageFiles

func (a *ApplicationSnapshotImage) FetchImageFiles(ctx context.Context) error

func (*ApplicationSnapshotImage) FetchParentImageConfig

func (a *ApplicationSnapshotImage) FetchParentImageConfig(ctx context.Context) error

func (ApplicationSnapshotImage) GetReference

func (a ApplicationSnapshotImage) GetReference() name.Reference

func (*ApplicationSnapshotImage) ResolveDigest

func (a *ApplicationSnapshotImage) ResolveDigest(ctx context.Context) (string, error)

func (*ApplicationSnapshotImage) SetImageURL

func (a *ApplicationSnapshotImage) SetImageURL(url string) error

func (*ApplicationSnapshotImage) Signatures

func (a *ApplicationSnapshotImage) Signatures() []signature.EntitySignature

func (*ApplicationSnapshotImage) ValidateAttestationSignature

func (a *ApplicationSnapshotImage) ValidateAttestationSignature(ctx context.Context) error

ValidateAttestationSignature executes the cosign.VerifyImageAttestations method

func (ApplicationSnapshotImage) ValidateAttestationSyntax

func (a ApplicationSnapshotImage) ValidateAttestationSyntax(ctx context.Context) error

ValidateAttestationSyntax validates the attestations against known JSON schemas, errors out if there are no attestations to check to prevent successful syntax check of no inputs, must invoke [ValidateAttestationSignature] to prefill the attestations.

func (*ApplicationSnapshotImage) ValidateImageAccess

func (a *ApplicationSnapshotImage) ValidateImageAccess(ctx context.Context) error

ValidateImageAccess executes the remote.Head method on the ApplicationSnapshotImage image ref

func (*ApplicationSnapshotImage) ValidateImageSignature

func (a *ApplicationSnapshotImage) ValidateImageSignature(ctx context.Context) error

ValidateImageSignature executes the cosign.VerifyImageSignature method on the ApplicationSnapshotImage image ref.

func (*ApplicationSnapshotImage) WriteInputFile

func (a *ApplicationSnapshotImage) WriteInputFile(ctx context.Context) (string, []byte, error)

WriteInputFile writes the JSON from the attestations to input.json in a random temp dir

type Input

type Input struct {
	Attestations []attestationData `json:"attestations"`
	Image        image             `json:"image"`
	AppSnapshot  app.SnapshotSpec  `json:"snapshot"`
}