Directories
¶
| Path | Synopsis |
|---|---|
|
attestors
|
|
|
command
Package command provides an attestor that captures comprehensive evidence of command execution within CI/CD pipelines and deployment workflows.
|
Package command provides an attestor that captures comprehensive evidence of command execution within CI/CD pipelines and deployment workflows. |
|
ec2
Package ec2 provides AWS EC2 instance attestation for generating EC2-specific attestation predicates.
|
Package ec2 provides AWS EC2 instance attestation for generating EC2-specific attestation predicates. |
|
git
Package git provides comprehensive Git repository attestation for generating Git-specific attestation predicates.
|
Package git provides comprehensive Git repository attestation for generating Git-specific attestation predicates. |
|
github-workflow
Package githubworkflow provides comprehensive GitHub Actions workflow attestation for generating GitHub Actions-specific environment predicates.
|
Package githubworkflow provides comprehensive GitHub Actions workflow attestation for generating GitHub Actions-specific environment predicates. |
|
go-builder
Package gobuilder provides a Go builder attestor that generates provenance attestations for Go binary builds in GitHub Actions/EC2 environments.
|
Package gobuilder provides a Go builder attestor that generates provenance attestations for Go binary builds in GitHub Actions/EC2 environments. |
|
sbom
Package sbom provides SBOM (Software Bill of Materials) attestation for CycloneDX and SPDX documents.
|
Package sbom provides SBOM (Software Bill of Materials) attestation for CycloneDX and SPDX documents. |
|
Package buildenv detects the build environment and collects provenance data.
|
Package buildenv detects the build environment and collects provenance data. |
|
clients
|
|
|
aws/ec2
Package ec2 provides a comprehensive AWS EC2 metadata client.
|
Package ec2 provides a comprehensive AWS EC2 metadata client. |
|
aws/eks
Package eks provides a client for reading AWS EKS/IRSA service account tokens.
|
Package eks provides a client for reading AWS EKS/IRSA service account tokens. |
|
fulcio
Package fulcio provides a client for interacting with Fulcio CA to obtain code signing certificates.
|
Package fulcio provides a client for interacting with Fulcio CA to obtain code signing certificates. |
|
git
Package git provides a client for collecting Git repository information.
|
Package git provides a client for collecting Git repository information. |
|
github
Package github provides a client for interacting with GitHub Actions OIDC tokens.
|
Package github provides a client for interacting with GitHub Actions OIDC tokens. |
|
jwt
Package jwt provides a JWT client for parsing, validating, and verifying JWT tokens.
|
Package jwt provides a JWT client for parsing, validating, and verifying JWT tokens. |
|
k8s
Package k8s provides a client for reading Kubernetes service account tokens.
|
Package k8s provides a client for reading Kubernetes service account tokens. |
|
rekor/v1
Package rekor provides a client for interacting with Rekor transparency log.
|
Package rekor provides a client for interacting with Rekor transparency log. |
|
Package config provides configuration interfaces and implementations for the attestation framework.
|
Package config provides configuration interfaces and implementations for the attestation framework. |
|
crypto
|
|
|
keys
Package keys provides utilities for loading, parsing, and managing cryptographic keys.
|
Package keys provides utilities for loading, parsing, and managing cryptographic keys. |
|
Package destination provides a unified, pluggable system for outputting attestations to various backends including files, object storage, APIs, and more.
|
Package destination provides a unified, pluggable system for outputting attestations to various backends including files, object storage, APIs, and more. |
|
file
Package file provides a filesystem destination for writing attestations to local files.
|
Package file provides a filesystem destination for writing attestations to local files. |
|
Package errors provides a simplified, production-ready error handling system.
|
Package errors provides a simplified, production-ready error handling system. |
|
http
|
|
|
client
Package http provides a simplified HTTP client.
|
Package http provides a simplified HTTP client. |
|
transport
Package transport provides configurable HTTP client construction with TLS support.
|
Package transport provides configurable HTTP client construction with TLS support. |
|
Package logger provides a structured logging interface based on slog.
|
Package logger provides a structured logging interface based on slog. |
|
Package pipeline provides the core pipeline execution infrastructure for attestation generation.
|
Package pipeline provides the core pipeline execution infrastructure for attestation generation. |
|
predicates
|
|
|
command/v1
Package v1 provides version 1 predicate definitions for command execution attestations.
|
Package v1 provides version 1 predicate definitions for command execution attestations. |
|
ec2/v1
Package v1 provides version 1 predicate definitions for AWS EC2 instance attestations.
|
Package v1 provides version 1 predicate definitions for AWS EC2 instance attestations. |
|
file/v1
Package v1 provides type definitions for file/folder attestation predicates.
|
Package v1 provides type definitions for file/folder attestation predicates. |
|
git/v1
Package v1 provides version 1 predicate definitions for Git repository attestations.
|
Package v1 provides version 1 predicate definitions for Git repository attestations. |
|
github-workflow/v1
Package v1 provides version 1 predicate definitions for GitHub Actions workflow attestations.
|
Package v1 provides version 1 predicate definitions for GitHub Actions workflow attestations. |
|
go-builder/v1
Package v1 provides predicate definitions for the Go Builder attestor.
|
Package v1 provides predicate definitions for the Go Builder attestor. |
|
jwt/v1
Package v1 provides version 1 predicate definitions for JWT token attestations.
|
Package v1 provides version 1 predicate definitions for JWT token attestations. |
|
provenance/v1
Package v1 provides SLSA Provenance v1.0 predicate definitions.
|
Package v1 provides SLSA Provenance v1.0 predicate definitions. |
|
sbom/v1
Package v1 provides SBOM attestation predicate types for CycloneDX and SPDX formats.
|
Package v1 provides SBOM attestation predicate types for CycloneDX and SPDX formats. |
|
Package transparency provides higher-level transparency log operations built on top of the Rekor client.
|
Package transparency provides higher-level transparency log operations built on top of the Rekor client. |
|
Package utils provides common utility functions for attestors.
|
Package utils provides common utility functions for attestors. |
Click to show internal directories.
Click to hide internal directories.