Struct Signer 

pub struct Signer {
    pub identity: String,
    pub issuer: String,
    pub predicate_type: String,
}

Who must have signed a release’s attestation, and what it must attest.

Fields

identity: String

The certificate’s subject alternative name, matched exactly.

issuer: String

The certificate’s OIDC issuer, matched exactly.

predicate_type: String

The in-toto statement’s predicateType, matched exactly.

Implementations

impl Signer

pub fn release(tag: &str) -> Self

This repository’s release workflow, run for exactly tag.

Stricter than gh attestation verify --repo, which accepts any workflow in the repository at any ref. Pinning the tag ties the bytes to the version asked for, so an older release’s genuine asset and bundle can’t answer a request for a newer one.

The owner is today’s name. Releases v0.5.0 and v0.6.0 were signed before the account was renamed, under a name GitHub now reports as unregistered, so anyone could claim it and sign as it. Those two tags are refused here, as gh attestation verify --repo refuses them (measured 2026-09-26).

Trait Implementations

impl Clone for Signer

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Signer

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Signer

impl PartialEq for Signer

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Signer