provenance

Documentation

Index

• Constants
• func GetSubjectDigests(tr *v1beta1.TaskRun, logger *zap.SugaredLogger) []in_toto.Subject
• func NewFormatter(cfg config.Config, logger *zap.SugaredLogger) (formats.Payloader, error)
• func Steps(tr *v1beta1.TaskRun) []provenance.RecipeStep
• type Provenance
  • func (i *Provenance) CreatePayload(obj interface{}) (interface{}, error)
  • func (i *Provenance) Type() formats.PayloadType
  • func (i *Provenance) Wrap() bool

Constants

const (
	ChainsReproducibleAnnotation = "chains.tekton.dev/reproducible"
	PredicateType                = "https://tekton.dev/chains/provenance"
)

Functions

func GetSubjectDigests

func GetSubjectDigests(tr *v1beta1.TaskRun, logger *zap.SugaredLogger) []in_toto.Subject

GetSubjectDigests depends on taskResults with names ending with _DIGEST. To be able to find the resource that matches the digest, it relies on a naming schema for an input parameter. If the output result from this task is foo_DIGEST, it expects to find an parameter named 'foo', and resolves this value to use for the subject with for the found digest. If no parameter is found, we search the results of this task, which allows for a task to create a random resource not known prior to execution that gets checksummed and added as the subject. Digests can be on two formats: $alg:$digest (commonly used for container image hashes), or $alg:$digest $path, which is used when a step is calculating a hash of a previous step.

func NewFormatter

func NewFormatter(cfg config.Config, logger *zap.SugaredLogger) (formats.Payloader, error)

func Steps

func Steps(tr *v1beta1.TaskRun) []provenance.RecipeStep

Types

type Provenance

type Provenance struct {
	// contains filtered or unexported fields
}

func (*Provenance) CreatePayload

func (i *Provenance) CreatePayload(obj interface{}) (interface{}, error)

func (*Provenance) Type

func (i *Provenance) Type() formats.PayloadType

func (*Provenance) Wrap

func (i *Provenance) Wrap() bool