affidavit 26.6.22

Provenance Layer — receipt assembly and certification (verify a witness against a format standard; never decide honesty).
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

// Copyright (c) 2024 Sean Chatman
// SPDX-License-Identifier: MIT OR Apache-2.0
//
// Thin verb wrapper. The pack is authoritative for the CLI *interface* only;
// the body delegates to a stable consumer-implemented handler.

//! `receipt sbom-attest` verb.

use clap_noun_verb::Result;
use clap_noun_verb_macros::verb;

/// Emit a SLSA-flavored provenance attestation linking SBOM address to receipt
#[verb("sbom-attest", "receipt")]
pub fn sbom_attest(
    sbom_path: String,
    receipt: Option<String>,
    format: Option<String>,
) -> Result<()> {
    crate::handlers::sbom_attest(sbom_path, receipt, format)
}