pub struct OidcBinding {
pub issuer: String,
pub subject: String,
pub audience: String,
pub token_exp: i64,
pub platform: Option<String>,
pub jti: Option<String>,
pub normalized_claims: Option<Map<String, Value>>,
}Expand description
OIDC token binding information for machine identity attestations.
Proves that the attestation was created by a CI/CD workload with a specific OIDC token. Contains the issuer, subject, audience, and expiration so verifiers can reconstruct the identity without needing the ephemeral private key.
Fields§
§issuer: StringOIDC token issuer (e.g., “https://token.actions.githubusercontent.com”).
subject: StringToken subject (unique workload identifier).
audience: StringExpected audience.
token_exp: i64Token expiration timestamp (Unix timestamp).
platform: Option<String>CI/CD platform (e.g., “github”, “gitlab”, “circleci”).
jti: Option<String>JTI for replay detection (if available).
normalized_claims: Option<Map<String, Value>>Platform-normalized claims (e.g., repo, actor, run_id for GitHub).
Trait Implementations§
Source§impl Clone for OidcBinding
impl Clone for OidcBinding
Source§fn clone(&self) -> OidcBinding
fn clone(&self) -> OidcBinding
Returns a duplicate of the value. Read more
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
Performs copy-assignment from
source. Read moreSource§impl Debug for OidcBinding
impl Debug for OidcBinding
Source§impl<'de> Deserialize<'de> for OidcBinding
impl<'de> Deserialize<'de> for OidcBinding
Source§fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
Deserialize this value from the given Serde deserializer. Read more
Source§impl PartialEq for OidcBinding
impl PartialEq for OidcBinding
Source§impl Serialize for OidcBinding
impl Serialize for OidcBinding
impl StructuralPartialEq for OidcBinding
Auto Trait Implementations§
impl Freeze for OidcBinding
impl RefUnwindSafe for OidcBinding
impl Send for OidcBinding
impl Sync for OidcBinding
impl Unpin for OidcBinding
impl UnsafeUnpin for OidcBinding
impl UnwindSafe for OidcBinding
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more