utils

Documentation

Index

• func DecodeSignature(s string) ([]byte, error)
• func ParseBuilderID(id string, needVersion bool) (string, string, error)
• func PayloadFromEnvelope(env *dsselib.Envelope) ([]byte, error)
• func TagFromGitHubRef(ref string) (string, error)
• func ValidateGitHubTagRef(tag string) error
• func VerifyVersionedTag(provenanceTag, expectedTag string) error
• type TrustedBuilderID
  • func TrustedBuilderIDNew(builderID string, needVersion bool) (*TrustedBuilderID, error)
  • func (b *TrustedBuilderID) MatchesFull(builderID string, allowRef bool) error
  • func (b *TrustedBuilderID) MatchesLoose(builderID string, allowRef bool) error
  • func (b *TrustedBuilderID) Name() string
  • func (b *TrustedBuilderID) String() string
  • func (b *TrustedBuilderID) Version() string

Functions

func DecodeSignature

func DecodeSignature(s string) ([]byte, error)

func ParseBuilderID

func ParseBuilderID(id string, needVersion bool) (string, string, error)

func PayloadFromEnvelope

func PayloadFromEnvelope(env *dsselib.Envelope) ([]byte, error)

func TagFromGitHubRef

func TagFromGitHubRef(ref string) (string, error)

func ValidateGitHubTagRef

func ValidateGitHubTagRef(tag string) error

func VerifyVersionedTag

func VerifyVersionedTag(provenanceTag, expectedTag string) error

Types

type TrustedBuilderID

type TrustedBuilderID struct {
	// contains filtered or unexported fields
}

func TrustedBuilderIDNew

func TrustedBuilderIDNew(builderID string, needVersion bool) (*TrustedBuilderID, error)

TrustedBuilderIDNew creates a new BuilderID structure.

func (*TrustedBuilderID) MatchesFull

func (b *TrustedBuilderID) MatchesFull(builderID string, allowRef bool) error

Matches matches the builderID string against the reference builderID. Both the name and versions are always verified.

func (*TrustedBuilderID) MatchesLoose

func (b *TrustedBuilderID) MatchesLoose(builderID string, allowRef bool) error

Matches matches the builderID string against the reference builderID. If the builderID contains a semver, the full builderID must match. Otherwise, only the name needs to match. `allowRef: true` indicates that the matching need not be an eaxct match. In this case, if the BuilderID version is a GitHub ref `refs/tags/name`, we will consider it equal to user-provided builderID `name`.

func (*TrustedBuilderID) Name

func (b *TrustedBuilderID) Name() string

func (*TrustedBuilderID) String

func (b *TrustedBuilderID) String() string

func (*TrustedBuilderID) Version

func (b *TrustedBuilderID) Version() string