Source Provenance Response
data class SourceProvenanceResponse(val fileHashes: Map<String, String>, val resolvedRepoSource: RepoSourceResponse, val resolvedStorageSource: StorageSourceResponse, val resolvedStorageSourceManifest: StorageSourceManifestResponse)
Provenance of the source. Ways to find the original source, or verify that some source was used for this build.
Constructors
Link copied to clipboard
fun SourceProvenanceResponse(fileHashes: Map<String, String>, resolvedRepoSource: RepoSourceResponse, resolvedStorageSource: StorageSourceResponse, resolvedStorageSourceManifest: StorageSourceManifestResponse)
Types
Properties
Link copied to clipboard
Hash(es) of the build source, which can be used to verify that the original source integrity was maintained in the build. Note that FileHashes
will only be populated if BuildOptions
has requested a SourceProvenanceHash
. The keys to this map are file paths used as build source and the values contain the hash values for those files. If the build source came in a single package such as a gzipped tarfile (.tar.gz
), the FileHash
will be for the single path to that file.