jsonv2

Documentation

Overview

Package jsonv2 provides a normalization which is completely based on the abstract (internal) version of the component descriptor and is therefore agnostic of the final serialization format. Signatures using this algorithm can be transferred among different schema versions, as long as is able to handle the complete information using for the normalization. Older format might omit some info, therefore the signatures cannot be validated for such representations, if the original component descriptor has used such parts.

Index

• Constants
• Variables

Constants

const Algorithm = compdesc.JsonNormalisationV2

Variables

var CDExcludes = signing.MapExcludes{
	"meta": nil,
	"component": signing.MapExcludes{
		"repositoryContexts": nil,
		"provider": signing.MapExcludes{
			"labels": rules.LabelExcludes,
		},
		"labels": rules.LabelExcludes,
		"resources": signing.DynamicArrayExcludes{
			ValueMapper: rules.MapResourcesWithNoneAccess,
			Continue: signing.MapExcludes{
				"access":  nil,
				"srcRefs": nil,
				"labels":  rules.LabelExcludes,
			},
		},
		"sources": signing.ArrayExcludes{
			Continue: signing.MapExcludes{
				"access": nil,
				"labels": rules.LabelExcludes,
			},
		},
		"references": signing.ArrayExcludes{
			signing.MapExcludes{
				"labels": rules.LabelExcludes,
			},
		},
	},
	"signatures":    nil,
	"nestedDigests": nil,
}

CDExcludes describes the fields relevant for Signing ATTENTION: if changed, please adapt the Equivalent Functions in the generic part, accordingly.