rawurl

Documentation

Overview

Package rawurl implements source.Resolver for url: manifest sources. Integrity is TOFU: the first fetch records a SHA-384 SRI; later fetches verify against it. No upstream anchor exists — the publisher controls the bytes without registry intermediation.

Index

• type Options
• type Resolved
• type ResolvedFile
• type Source
  • func New(opts Options) *Source
  • func (s *Source) Resolve(ctx context.Context, p *purl.PURL, _ []string) (*Resolved, error)

Types

type Options

type Options struct {
	HTTPClient *client.Client
}

type Resolved

type Resolved = source.Resolved

type ResolvedFile

type ResolvedFile = source.ResolvedFile

type Source

type Source struct {
	// contains filtered or unexported fields
}

func New

func New(opts Options) *Source

func (*Source) Resolve

func (s *Source) Resolve(ctx context.Context, p *purl.PURL, _ []string) (*Resolved, error)

Resolve fetches the purl's download_url qualifier. files is ignored — a url source is exactly one file by construction.