Skip to main content

AttestationDeclarations

Struct AttestationDeclarations 

Source
pub struct AttestationDeclarations {
    pub assessors: Vec<DeclaredAssessor>,
    pub attestations: Vec<AttestationAssertion>,
    pub claims: Vec<DeclaredClaim>,
    pub evidence: Vec<DeclaredEvidence>,
    pub targets: Option<DeclarationTargets>,
    pub affirmation: Option<DeclaredAffirmation>,
    pub signature: Option<SignaturePresence>,
    pub standards: Vec<DefinedStandard>,
}
Expand description

Normalized CDXA evidence: CycloneDX 1.6 declarations plus the definitions.standards encodings its attestations map into.

Attached at crate::model::FormatExtensions::declarations (reachable via crate::model::NormalizedSbom::declarations). Populated only by the CycloneDX JSON parser for specVersion >= 1.6 documents that carry these sections; None for SPDX, older CycloneDX, and XML input — and skipped in serialization when absent, so documents without declarations serialize byte-identically to previous releases.

Fields§

§assessors: Vec<DeclaredAssessor>§attestations: Vec<AttestationAssertion>§claims: Vec<DeclaredClaim>§evidence: Vec<DeclaredEvidence>§targets: Option<DeclarationTargets>§affirmation: Option<DeclaredAffirmation>§signature: Option<SignaturePresence>

Document-level JSF signature presence over the declarations (structural only, never verified).

§standards: Vec<DefinedStandard>

definitions.standards[] — the standard encodings attestation map entries refLink their requirements into.

Implementations§

Source§

impl AttestationDeclarations

Source

pub fn claim_by_ref(&self, bom_ref: &str) -> Option<&DeclaredClaim>

Look up a claim by its bom-ref.

Source

pub fn evidence_by_ref(&self, bom_ref: &str) -> Option<&DeclaredEvidence>

Look up an evidence item by its bom-ref.

Source

pub fn assessor_by_ref(&self, bom_ref: &str) -> Option<&DeclaredAssessor>

Look up an assessor by its bom-ref.

Source

pub fn requirement_by_ref( &self, bom_ref: &str, ) -> Option<(&DefinedStandard, &DefinedRequirement)>

Resolve a requirement refLink to its (standard, requirement) pair.

Source

pub fn document_evidence_level(&self) -> EvidenceLevel

The document-wide evidence ceiling: EvidenceLevel::SignaturePresent when the declarations themselves, the affirmation, or any signatory carries a JSF signature object; EvidenceLevel::Structural otherwise. Never SignatureVerified — phase 1 records signature presence only.

Source

pub fn supported_requirements( &self, as_of: DateTime<Utc>, ) -> Vec<SupportedRequirement<'_>>

The standard requirements this document’s attestations fully support at the evaluation instant as_of (pass the compliance engine’s injectable clock — ComplianceChecker::now() — never an inline wall-clock read).

Fail-closed criteria — an attestation map entry supports its requirement only when ALL hold:

  1. its requirement refLink resolves to a definitions.standards[].requirements[] entry;
  2. its declared conformance score is full (>= 1.0; the schema caps at 1). Partial conformance is surfaced elsewhere, never auto-satisfied;
  3. it carries no counterClaims;
  4. at least one claims refLink resolves to a claim whose target resolves, that carries no counterEvidence, and that cites at least one resolving evidence item fresh at as_of (DeclaredEvidence::is_fresh).

Dangling refs anywhere in the chain simply drop that path — the parser’s tolerance convention keeps them in the model (marked CdxaResolution::Dangling) for rules that surface them.

Source

pub fn evidence_for_family( &self, family: AttestationRuleFamily, as_of: DateTime<Utc>, ) -> Vec<SupportedRequirement<'_>>

Self::supported_requirements filtered to the requirements whose (standard, identifier) pair classifies into family (AttestationRuleFamily::classify). Unknown pairs never appear — they are recorded in the model but cannot influence a verdict.

Trait Implementations§

Source§

impl Clone for AttestationDeclarations

Source§

fn clone(&self) -> AttestationDeclarations

Returns a duplicate of the value. Read more
1.0.0 (const: unstable) · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for AttestationDeclarations

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl Default for AttestationDeclarations

Source§

fn default() -> AttestationDeclarations

Returns the “default value” for a type. Read more
Source§

impl<'de> Deserialize<'de> for AttestationDeclarations

Source§

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>
where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer. Read more
Source§

impl PartialEq for AttestationDeclarations

Source§

fn eq(&self, other: &AttestationDeclarations) -> bool

Equality operator ==. Read more
1.0.0 (const: unstable) · Source§

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=. Read more
Source§

impl Serialize for AttestationDeclarations

Source§

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>
where __S: Serializer,

Serialize this value into the given Serde serializer. Read more
Source§

impl StructuralPartialEq for AttestationDeclarations

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
Source§

impl<T> DeserializeOwned for T
where T: for<'de> Deserialize<'de>,

Source§

impl<T> DynClone for T
where T: Clone,

Source§

fn __clone_box(&self, _: Private) -> *mut ()

Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T> Instrument for T

Source§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided Span, returning an Instrumented wrapper. Read more
Source§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> IntoEither for T

Source§

fn into_either(self, into_left: bool) -> Either<Self, Self>

Converts self into a Left variant of Either<Self, Self> if into_left is true. Converts self into a Right variant of Either<Self, Self> otherwise. Read more
Source§

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
where F: FnOnce(&Self) -> bool,

Converts self into a Left variant of Either<Self, Self> if into_left(&self) returns true. Converts self into a Right variant of Either<Self, Self> otherwise. Read more
Source§

impl<T> Pointable for T

Source§

const ALIGN: usize

The alignment of pointer.
Source§

type Init = T

The type for initializers.
Source§

unsafe fn init(init: <T as Pointable>::Init) -> usize

Initializes a with the given initializer. Read more
Source§

unsafe fn deref<'a>(ptr: usize) -> &'a T

Dereferences the given pointer. Read more
Source§

unsafe fn deref_mut<'a>(ptr: usize) -> &'a mut T

Mutably dereferences the given pointer. Read more
Source§

unsafe fn drop(ptr: usize)

Drops the object pointed to by the given pointer. Read more
Source§

impl<T> PolicyExt for T
where T: ?Sized,

Source§

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Sized + Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns Action::Follow only if self and other return Action::Follow. Read more
Source§

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Sized + Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns Action::Follow if either self or other returns Action::Follow. Read more
Source§

impl<T> Same for T

Source§

type Output = T

Should always be Self
Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
Source§

impl<T> WithSubscriber for T

Source§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a WithDispatch wrapper. Read more
Source§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a WithDispatch wrapper. Read more