InTotoResponse

data class InTotoResponse(val expectedCommand: List<String>, val expectedMaterials: List<ArtifactRuleResponse>, val expectedProducts: List<ArtifactRuleResponse>, val signingKeys: List<SigningKeyResponse>, val stepName: String, val threshold: String)

This contains the fields corresponding to the definition of a software supply chain step in an in-toto layout. This information goes into a Grafeas note.

Constructors

Link copied to clipboard
fun InTotoResponse(expectedCommand: List<String>, expectedMaterials: List<ArtifactRuleResponse>, expectedProducts: List<ArtifactRuleResponse>, signingKeys: List<SigningKeyResponse>, stepName: String, threshold: String)

Types

Link copied to clipboard
object Companion

Properties

Link copied to clipboard

This field contains the expected command used to perform the step.

Link copied to clipboard

The following fields contain in-toto artifact rules identifying the artifacts that enter this supply chain step, and exit the supply chain step, i.e. materials and products of the step.

Link copied to clipboard

This field contains the public keys that can be used to verify the signatures on the step metadata.

Link copied to clipboard

This field identifies the name of the step in the supply chain.

Link copied to clipboard

This field contains a value that indicates the minimum number of keys that need to be used to sign the step's in-toto link.