View Source GoogleApi.BinaryAuthorization.V1.Model.SimpleSigningAttestationCheck (google_api_binary_authorization v0.16.0)

Require a signed DSSE attestation with type SimpleSigning.

Attributes

  • attestationAuthenticators (type: list(GoogleApi.BinaryAuthorization.V1.Model.AttestationAuthenticator.t), default: nil) - Required. The authenticators required by this check to verify an attestation. Typically this is one or more PKIX public keys for signature verification. Only one authenticator needs to consider an attestation verified in order for an attestation to be considered fully authenticated. In otherwords, this list of authenticators is an "OR" of the authenticator results. At least one authenticator is required.
  • containerAnalysisAttestationProjects (type: list(String.t), default: nil) - Optional. The projects where attestations are stored as Container Analysis Occurrences, in the format projects/[PROJECT_ID]. Only one attestation needs to successfully verify an image for this check to pass, so a single verified attestation found in any of container_analysis_attestation_projects is sufficient for the check to pass. A project ID must be used, not a project number. When fetching Occurrences from Container Analysis, only AttestationOccurrence kinds are considered. In the future, additional Occurrence kinds may be added to the query. Maximum number of container_analysis_attestation_projects allowed in each SimpleSigningAttestationCheck is 10.

Summary

Functions

Unwrap a decoded JSON object into its complex fields.

Types

@type t() :: %GoogleApi.BinaryAuthorization.V1.Model.SimpleSigningAttestationCheck{
  attestationAuthenticators:
    [GoogleApi.BinaryAuthorization.V1.Model.AttestationAuthenticator.t()] | nil,
  containerAnalysisAttestationProjects: [String.t()] | nil
}

Functions

@spec decode(struct(), keyword()) :: struct()

Unwrap a decoded JSON object into its complex fields.