rivox 1.0.0

Universal polyglot build coordination layer for Python, Rust, and Node monorepos
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

use crate::graph::GraphNode;
use anyhow::Result;
use serde_json::json;

pub fn generate_intoto_statement(nodes: &[GraphNode]) -> Result<serde_json::Value> {
    let subject: Vec<serde_json::Value> = nodes
        .iter()
        .map(|node| {
            json!({
                "name": format!("{}:{}", node.ecosystem, node.package_name),
                "digest": {
                    "sha256": node.content_hash.trim_start_matches("sha256:")
                }
            })
        })
        .collect();

    let statement = json!({
        "_type": "https://in-toto.io/Statement/v0.1",
        "predicateType": "https://in-toto.io/attestation/link/v0.1",
        "subject": subject,
        "predicate": {
            "byproducts": {},
            "command": ["rivox", "build"],
            "environment": {
                "builder": "rivox-v0.1.0"
            },
            "materials": []
        }
    });

    Ok(statement)
}