slsa

Jan 25, 2024

Changes in this version

+ const DssePayloadType

+ const IntotoPayloadType

+ const ProjectMetadataLabel

+ func NewCosignSigner(key, pass []byte, id string) (*cosignSigner, error)

+ func NewImageReader(fetcher ImageFetcher) *reader

+ type Attester struct

+ Config config.Config

+ Features config.FeatureFlags

+ ImageReader ImageReader

+ Images config.Images

+ LifecycleProvider LifecycleProvider

+ Version string

+ func (*Attester) Sign(ctx context.Context, stmt intoto.Statement, signers ...Signer) ([]byte, error)

+ func (*Attester) Write(ctx context.Context, digestStr string, payload []byte, keychain authn.Keychain) (ggcrv1.Image, string, error)

+ func (a *Attester) AttestBuild(build *buildv1alpha2.Build, buildMetadata *cnb.BuildMetadata, pod *corev1.Pod, ...) (intoto.Statement, error)

+ type BuilderDependencyFn func() (slsav1.ResourceDescriptor, error)

+ func WithVersionedObject(kind string, obj K8sObject) BuilderDependencyFn

+ func WithVersionedObjects(kind string, objs []K8sObject) BuilderDependencyFn

+ type BuilderID string

+ const MediaTypeJSON

+ const SignedBuildID

+ const UnsignedBuildID

+ type ImageFetcher interface

+ Fetch func(keychain authn.Keychain, repoName string) (ggcrv1.Image, string, error)

+ type ImageReader interface

+ Read func(keychain authn.Keychain, repoName string) (string, string, map[string]string, error)

+ type K8sObject interface

+ GetName func() string

+ GetResourceVersion func() string

+ type LifecycleProvider interface

+ Metadata func() (cnb.LifecycleMetadata, error)

+ type Signer = dsse.Signer

+ func NewPKCS8Signer(key []byte, id string) (Signer, error)