attestation

Documentation

Index

• Constants
• type Attestation
  • func ProvenanceFromSignature(sig oci.Signature) (Attestation, error)
  • func SLSAProvenanceFromSignature(sig oci.Signature) (Attestation, error)

Constants

const (
	// Make it visible elsewhere
	PredicateSLSAProvenance = v02.PredicateSLSAProvenance
)

const (
	PredicateSpdxDocument = "https://spdx.dev/Document"
)

Types

type Attestation

type Attestation interface {
	Type() string
	PredicateType() string
	Statement() []byte
	Signatures() []signature.EntitySignature
	Subject() []in_toto.Subject
}

Attestation holds the raw attestation data, usually fetched from the signature envelope's payload; statement of a particular type and any signing information.

func ProvenanceFromSignature

func ProvenanceFromSignature(sig oci.Signature) (Attestation, error)

ProvenanceFromSignature parses an attestation layer from the provided OCI layer. Expects that the layer contains DSSE JSON with an embedded attestation of some type or other.

func SLSAProvenanceFromSignature

func SLSAProvenanceFromSignature(sig oci.Signature) (Attestation, error)

SLSAProvenanceFromSignature parses the SLSA Provenance v0.2 from the provided OCI layer. Expects that the layer contains DSSE JSON with the embedded SLSA Provenance v0.2 payload.