metadata

Documentation

Index

• func GetProjectFromNoteReference(ref string) (string, error)
• type PGPAttestation
• type ReadOnlyClient
• type ReadWriteClient
• type Vulnerability

Functions

func GetProjectFromNoteReference

func GetProjectFromNoteReference(ref string) (string, error)

GetProjectFromNoteReference extracts the project ID form the NoteReference

Types

type PGPAttestation

type PGPAttestation struct {
	Signature string
	KeyID     string
	// OccID is the occurrence ID for containeranalysis Occurrence_Attestation instance
	OccID string
}

PGPAttestation represents the Signature and the Signer Key Id from the containeranalysis Occurrence_Attestation instance.

type ReadOnlyClient

type ReadOnlyClient interface {
	// Vulnerabilities returns package vulnerabilities for a given image.
	Vulnerabilities(containerImage string) ([]Vulnerability, error)
	//Attestations get Attestation Occurrences for given image.
	Attestations(containerImage string, aa *kritisv1beta1.AttestationAuthority) ([]PGPAttestation, error)
	// Close closes client connections
	Close()
}

Read-only interface to access Occurrences and Notes using Grafeas API.

type ReadWriteClient

type ReadWriteClient interface {
	// Vulnerabilities returns package vulnerabilities for a given image.
	Vulnerabilities(containerImage string) ([]Vulnerability, error)
	// CreateAttestationOccurrence creates an Attestation occurrence for a given image, secret, and project.
	CreateAttestationOccurrence(note *grafeasv1beta1.Note,
		containerImage string, pgpSigningKey *secrets.PGPSigningSecret,
		proj string) (*grafeasv1beta1.Occurrence, error)
	//AttestationNote fetches an Attestation note for an Attestation Authority.
	AttestationNote(aa *kritisv1beta1.AttestationAuthority) (*grafeasv1beta1.Note, error)
	// Create Attestation Note for an Attestation Authority.
	CreateAttestationNote(aa *kritisv1beta1.AttestationAuthority) (*grafeasv1beta1.Note, error)
	//Attestations get Attestation Occurrences for given image.
	Attestations(containerImage string, aa *kritisv1beta1.AttestationAuthority) ([]PGPAttestation, error)
	// Close closes client connections
	Close()
}

Read/write interface to access Occurrences and Notes using Grafeas API.

type Vulnerability

type Vulnerability struct {
	Severity        string
	HasFixAvailable bool
	CVE             string
}