Struct VerifyTrustArgs 

pub struct VerifyTrustArgs {
    pub repo_dir: PathBuf,
    pub range: String,
    pub signers_file: PathBuf,
    pub registry_url: String,
    pub registry_did: String,
    pub authority_did: String,
    pub action: String,
    pub resource: String,
    pub fallback_resource: Option<String>,
    pub exempt_keyring: Option<PathBuf>,
    pub json: bool,
}

Everything verify-trust needs for one run.

Fields

repo_dir: PathBuf

Repository to verify (a working tree with git available).

range: String

Commit range in git rev-list syntax, e.g. origin/main..HEAD.

signers_file: PathBuf

Signer index file; relative paths resolve against repo_dir.

registry_url: String

Base URL of the Trust Registry (POST <url>/trust-tasks).

registry_did: String

DID of the registry (the recipient on every query document).

authority_did: String

DID of the authority the tuple is evaluated under.

action: String

TRQP action, e.g. git.commit.sign.

resource: String

TRQP resource, e.g. the org/repo slug.

fallback_resource: Option<String>

Broader resource to try when the primary one does not authorize (e.g. the org for an org-wide grant). Grant semantics are resource OR fallback: the registry’s wire contract cannot distinguish “no record” from an explicit authorized: false, so a repo-level record cannot veto an org-level grant.

exempt_keyring: Option<PathBuf>

Optional armored PGP keyring of exempt platform keys (e.g. GitHub’s web-flow key); relative paths resolve against repo_dir. Absent means no exemptions: every PGP-signed commit fails.

json: bool

Emit machine-readable JSON on stdout instead of human lines.

Trait Implementations

impl Clone for VerifyTrustArgs

fn clone(&self) -> VerifyTrustArgs

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VerifyTrustArgs

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.