View Source GoogleApi.BinaryAuthorization.V1.Model.SimpleSigningAttestationCheck (google_api_binary_authorization v0.17.1)
Require a signed DSSE attestation with type SimpleSigning.
Attributes
-
attestationAuthenticators
(type:list(GoogleApi.BinaryAuthorization.V1.Model.AttestationAuthenticator.t)
, default:nil
) - Required. The authenticators required by this check to verify an attestation. Typically this is one or more PKIX public keys for signature verification. Only one authenticator needs to consider an attestation verified in order for an attestation to be considered fully authenticated. In otherwords, this list of authenticators is an "OR" of the authenticator results. At least one authenticator is required. -
containerAnalysisAttestationProjects
(type:list(String.t)
, default:nil
) - Optional. The projects where attestations are stored as Container Analysis Occurrences, in the formatprojects/[PROJECT_ID]
. Only one attestation needs to successfully verify an image for this check to pass, so a single verified attestation found in any ofcontainer_analysis_attestation_projects
is sufficient for the check to pass. A project ID must be used, not a project number. When fetching Occurrences from Container Analysis, onlyAttestationOccurrence
kinds are considered. In the future, additional Occurrence kinds may be added to the query. Maximum number ofcontainer_analysis_attestation_projects
allowed in eachSimpleSigningAttestationCheck
is 10.
Summary
Functions
Unwrap a decoded JSON object into its complex fields.
Types
@type t() :: %GoogleApi.BinaryAuthorization.V1.Model.SimpleSigningAttestationCheck{ attestationAuthenticators: [GoogleApi.BinaryAuthorization.V1.Model.AttestationAuthenticator.t()] | nil, containerAnalysisAttestationProjects: [String.t()] | nil }