Struct BuildSignature

pub struct BuildSignature {
    pub key_id: Option<String>,
    pub key_type: Option<String>,
    pub public_key: Option<String>,
    pub signature: Option<Vec<u8>>,
}

Message encapsulating the signature of the verified build.

This type is not used in any activity, and only used as part of another schema.

Fields

key_id: Option<String>

An ID for the key used to sign. This could be either an ID for the key stored in public_key (such as the ID or fingerprint for a PGP key, or the CN for a cert), or a reference to an external key (such as a reference to a key in Cloud Key Management Service).

key_type: Option<String>

The type of the key, either stored in public_key or referenced in key_id.

public_key: Option<String>

Public key of the builder which can be used to verify that the related findings are valid and unchanged. If key_type is empty, this defaults to PEM encoded public keys. This field may be empty if key_id references an external key. For Cloud Build based signatures, this is a PEM encoded public key. To verify the Cloud Build signature, place the contents of this field into a file (public.pem). The signature field is base64-decoded into its binary representation in signature.bin, and the provenance bytes from BuildDetails are base64-decoded into a binary representation in signed.bin. OpenSSL can then verify the signature: openssl sha256 -verify public.pem -signature signature.bin signed.bin

signature: Option<Vec<u8>>

Required. Signature of the related BuildProvenance. In JSON, this is base-64 encoded.

Trait Implementations

impl Clone for BuildSignature

fn clone(&self) -> BuildSignature

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for BuildSignature

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for BuildSignature

fn default() -> BuildSignature

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for BuildSignature

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for BuildSignature

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Part for BuildSignature