pub struct SignedArtifact<'a> {
pub component_bytes: &'a [u8],
pub component_signature: &'a [u8],
pub sbom: &'a [u8],
pub sbom_signature: &'a [u8],
}Expand description
The material the host verifies before instantiating a filter (ADR 000006). The component
bytes plus a keyed cosign signature over them, and a mandatory SBOM with its own
signature. Signatures are RAW DER ECDSA bytes: decoding cosign’s base64 .sig and
fetching the artifact from an OCI registry is the ADR 000007 / wkg boundary, kept out
of the host so ADR 000006 (verify) and ADR 000007 (distribute) stay decoupled.
Fields§
§component_bytes: &'a [u8]The WASM component bytes.
component_signature: &'a [u8]Raw DER signature over component_bytes (cosign sign-blob).
sbom: &'a [u8]The SBOM as an in-toto-style statement whose subject[].digest.sha256 binds it to
component_bytes (verified at load, review f000003 #1). The predicate (the SBOM body)
stays opaque in v0.1 — content policy (CVE / license scanning) is deferred.
sbom_signature: &'a [u8]Raw DER signature over sbom.
Auto Trait Implementations§
impl<'a> Freeze for SignedArtifact<'a>
impl<'a> RefUnwindSafe for SignedArtifact<'a>
impl<'a> Send for SignedArtifact<'a>
impl<'a> Sync for SignedArtifact<'a>
impl<'a> Unpin for SignedArtifact<'a>
impl<'a> UnsafeUnpin for SignedArtifact<'a>
impl<'a> UnwindSafe for SignedArtifact<'a>
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Source§impl<T> FutureExt for T
impl<T> FutureExt for T
Source§fn with_context(self, otel_cx: Context) -> WithContext<Self>
fn with_context(self, otel_cx: Context) -> WithContext<Self>
Source§fn with_current_context(self) -> WithContext<Self>
fn with_current_context(self) -> WithContext<Self>
Source§impl<T> Instrument for T
impl<T> Instrument for T
Source§fn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
Source§fn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
Source§impl<T> IntoEither for T
impl<T> IntoEither for T
Source§fn into_either(self, into_left: bool) -> Either<Self, Self>
fn into_either(self, into_left: bool) -> Either<Self, Self>
self into a Left variant of Either<Self, Self>
if into_left is true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read moreSource§fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
self into a Left variant of Either<Self, Self>
if into_left(&self) returns true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read more