Module dsse 

DSSE envelopes and the in-toto Bundle that holds them.

A signature covers PAE(payloadType, payload), never the JSON around it (DSSE v1); a Bundle is JSON Lines, one envelope per line, in no particular order.

Structs

Envelope

A DSSE envelope: one statement and its signatures.

Signature

One signature on an envelope.

Constants

PAYLOAD_TYPE

The payload type of every in-toto statement.

Functions

decode

Decodes a bundle. Lines that are not envelopes are counted, not kept: a bundle may hold other tools’ lines, and a line nobody can read is a finding for attest verify, not a reason to drop the rest.

encode

Encodes a bundle: one envelope per line.

pae

The bytes a DSSE signature covers: "DSSEv1" SP LEN(type) SP type SP LEN(body) SP body.