Struct RegistrySource 

pub struct RegistrySource { /* private fields */ }

Pull-only OCI distribution client implementing LayerSource.

Implementations

impl RegistrySource

pub fn new(reference: RegistryRef) -> Self

pub fn parse(reference: &str) -> Result<Self, SourceError>

pub fn with_credential(self, username: &str, password: &str) -> Self

Use this credential instead of consulting the environment. Sent as HTTP Basic to the token realm only.

Trait Implementations

impl Debug for RegistrySource

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl LayerSource for RegistrySource

fn fetch_manifest(&self, layer: &LayerRef) -> Result<Vec<u8>, SourceError>

Fetch the manifest bytes for a layer reference.

fn fetch_line_status( &self, layer: &LayerRef, ) -> Result<Option<Vec<u8>>, SourceError>

Fetch the baseline line-status DSSE envelope this source carries beside the layer, if any (REQ-STATUS-DIST-001). Returns the opaque envelope bytes — the source is not trusted to have verified them; the caller re-verifies against the trust root before caching. A source that carries no baseline returns Ok(None), which is not an error: line-status is updatable evidence, absent on some layers.

fn fetch_line_index(&self, line: &str) -> Result<Option<Vec<u8>>, SourceError>

Fetch the realm’s signed line-index envelope for this line, if the source carries one (REQ-INDEXAUTH-001). Same contract as fetch_line_status: opaque bytes, re-verified by the caller against the trust root. The source is never trusted to have checked it — it is precisely the party this document exists to constrain.

fn served_layers(&self, line: &str) -> Result<Option<Vec<String>>, SourceError>

The layer ids this source is willing to serve for a line. Used to detect OMISSION against the signed index. A source that cannot enumerate returns Ok(None) — distinct from Ok(Some(vec![])), which means “I enumerate, and I have nothing”, and would flag every indexed layer as hidden.

fn fetch_attestations( &self, layer: &LayerRef, ) -> Result<Vec<CarriedAttestation>, SourceError>

Fetch the attestations this source carries beside the layer as referrer artifacts (REQ-ATTEST-002). Same contract as fetch_line_status: OPAQUE, UNTRUSTED bytes. The source is never trusted to have verified a statement — it is the party that would benefit from a forged one — so the caller persists them verbatim and varve verify re-checks each against the trust root.

fn fetch_blob(&self, digest: &str) -> Result<Vec<u8>, SourceError>

Fetch a blob (a tool binary) by its digest (sha256:<hex>).