Documentation
¶
Index ¶
- func RetrieveAllArtifactURIs(ctx context.Context, obj objects.TektonObject, deepInspectionEnabled bool) []string
- func SubjectDigests(ctx context.Context, obj objects.TektonObject, ...) []*intoto.ResourceDescriptor
- func SubjectsFromPipelineRunV1Beta1(ctx context.Context, obj objects.TektonObject, ...) []*intoto.ResourceDescriptor
- func SubjectsFromTektonObjectV1Beta1(ctx context.Context, obj objects.TektonObject) []*intoto.ResourceDescriptor
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func RetrieveAllArtifactURIs ¶
func RetrieveAllArtifactURIs(ctx context.Context, obj objects.TektonObject, deepInspectionEnabled bool) []string
RetrieveAllArtifactURIs returns all the URIs of the software artifacts produced from the run object. - It first extracts intoto subjects from run object results and converts the subjects to a slice of string URIs in the format of "NAME" + "@" + "ALGORITHM" + ":" + "DIGEST". - If no subjects could be extracted from results, then an empty slice is returned.
func SubjectDigests ¶
func SubjectDigests(ctx context.Context, obj objects.TektonObject, slsaconfig *slsaconfig.SlsaConfig) []*intoto.ResourceDescriptor
SubjectDigests returns software artifacts produced from the TaskRun/PipelineRun object in the form of standard subject field of intoto statement. The type hinting fields expected in results help identify the generated software artifacts. Valid type hinting fields must:
- have suffix `IMAGE_URL` & `IMAGE_DIGEST` or `ARTIFACT_URI` & `ARTIFACT_DIGEST` pair.
- the `*_DIGEST` field must be in the format of "<algorithm>:<actual-sha>" where the algorithm must be "sha256" and actual sha must be valid per https://github.com/opencontainers/image-spec/blob/main/descriptor.md#sha-256.
- the `*_URL` or `*_URI` fields cannot be empty.
func SubjectsFromPipelineRunV1Beta1 ¶
func SubjectsFromPipelineRunV1Beta1(ctx context.Context, obj objects.TektonObject, slsaconfig *slsaconfig.SlsaConfig) []*intoto.ResourceDescriptor
SubjectsFromPipelineRunV1Beta1 returns software artifacts produced from the PipelineRun object.
func SubjectsFromTektonObjectV1Beta1 ¶
func SubjectsFromTektonObjectV1Beta1(ctx context.Context, obj objects.TektonObject) []*intoto.ResourceDescriptor
SubjectsFromTektonObjectV1Beta1 returns software artifacts produced from the Tekton object.
Types ¶
This section is empty.
Source Files