Struct AttestationConfig 

pub struct AttestationConfig {
    pub enabled: bool,
    pub mode: Option<AttestationMode>,
    pub artifacts: Option<Vec<AttestationArtifactKind>>,
    pub skip: Option<StringOrBool>,
}

SLSA build-provenance / attestation configuration for binaries and archives.

Two modes select how anodizer participates in attestation:

• AttestationMode::Subjects (the default) emits a subjects manifest (dist/attestation-subjects.json) that anodizer-action feeds to GitHub’s actions/attest-build-provenance. anodizer does NOT mint a GitHub-trusted attestation itself in this mode — the Action’s OIDC identity does. This is the path fd / biome / gping use.
• AttestationMode::Emit generates a self-contained in-toto v1 statement carrying an SLSA provenance v1 predicate over the selected artifacts, writes it as a release asset (attestation.intoto.jsonl), and lets the existing signs: stage sign it (keyed, not OIDC). This is for users who can’t run the Action (the --with-provenance toggle).

YAML:

attestations:
  enabled: true
  mode: subjects          # or: emit ; default = subjects
  artifacts: [archive, binary, checksum]

Fields

enabled: bool

Enable attestation. When false (the default), the stage is a no-op.

mode: Option<AttestationMode>

Participation mode: subjects (default) writes a manifest for actions/attest-build-provenance; emit generates and signs an in-toto SLSA provenance statement as a release asset.

artifacts: Option<Vec<AttestationArtifactKind>>

Which produced-artifact kinds to attest. Each entry selects a KIND (archive, binary, checksum); the concrete subject set (filenames

• sha256) is DERIVED from the artifacts anodizer already produced.

Defaults to [archive, binary, checksum] when omitted.

skip: Option<StringOrBool>

Skip the attestation stage. Accepts a bool or a template string.

Implementations

impl AttestationConfig

pub const SUBJECTS_MANIFEST_NAME: &'static str = "attestation-subjects.json"

Filename of the subjects manifest written in subjects mode (single crate / lockstep). Per-crate workspace mode prefixes the crate name.

pub const STATEMENT_NAME: &'static str = "attestation.intoto.jsonl"

Filename of the in-toto statement written in emit mode (single crate / lockstep). Per-crate workspace mode prefixes the crate name.

pub fn resolved_mode(&self) -> AttestationMode

Resolve the participation mode, defaulting to subjects.

pub fn resolved_artifacts(&self) -> Option<Vec<AttestationArtifactKind>>

The configured artifact-kind selection, or None when artifacts: is omitted.

None is NOT a hand-curated subset — the stage interprets it as “attest every release-uploadable artifact” (the full release_uploadable_kinds() set minus signatures/certificates and the attestation outputs themselves), so a .deb/.rpm/SBOM/installer the user ships is attested by default rather than silently dropped.

Trait Implementations

impl Clone for AttestationConfig

fn clone(&self) -> AttestationConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AttestationConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AttestationConfig

fn default() -> AttestationConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AttestationConfig

where AttestationConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for AttestationConfig

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl PartialEq for AttestationConfig

fn eq(&self, other: &AttestationConfig) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for AttestationConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AttestationConfig