Enum CommitStatus 

pub enum CommitStatus {
    Unsigned,
    Malformed(String),
    NoSignerDid {
        committer: String,
    },
    UnresolvedSigner {
        did: String,
        error: String,
    },
    UnknownKey {
        did: String,
        fingerprint: String,
    },
    BadSignature {
        signer_did: String,
    },
    Unauthorized {
        signer_did: String,
    },
    RegistryUnavailable {
        signer_did: String,
        error: String,
    },
    PgpRejected {
        detail: String,
    },
    Exempt {
        fingerprint: String,
    },
    Trusted {
        signer_did: String,
        resource: String,
    },
}

Outcome for one commit. Ordered worst-first so a report can sort on it.

Variants

Unsigned

No gpgsig header on the commit.

Malformed(String)

The signature did not parse as an Ed25519 sshsig.

NoSignerDid

Signed, but the committer header names no DID, so the commit asserts no identity to resolve or authorize.

Fields

committer: String

UnresolvedSigner

The claimed DID could not be resolved, so its published keys are unknown. Fails closed: an unresolvable signer is not a trusted one.

Fields

did: String

error: String

UnknownKey

The claimed DID resolved, but publishes no verification method holding the key that signed this commit.

Fields

did: String

fingerprint: String

BadSignature

The DID publishes the key, but the signature does not verify.

Fields

signer_did: String

Unauthorized

Valid signature, but the registry did not authorize the signer.

Fields

signer_did: String

RegistryUnavailable

Valid signature, but the registry could not be consulted. Fails the run (closed), distinctly from a denial.

Fields

signer_did: String

error: String

PgpRejected

PGP-signed (a platform commit), but the signature verifies against no key in the exempt keyring — or no keyring is configured.

Fields

detail: String

Exempt

PGP-signed by a key in the committed exempt keyring (e.g. a GitHub web-UI merge commit). Passes, reported distinctly from Trusted.

Fields

fingerprint: String

Trusted

Valid signature by a registry-authorized signer. resource is the tuple resource the grant was found under (the primary one or the fallback).

Fields

signer_did: String

resource: String

Implementations

impl CommitStatus

pub fn is_trusted(&self) -> bool

Signed by a registry-authorized DID.

pub fn passes(&self) -> bool

Whether the commit passes the check: DID-trusted or keyring-exempt.

Trait Implementations

impl Clone for CommitStatus

fn clone(&self) -> CommitStatus

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CommitStatus

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for CommitStatus

fn eq(&self, other: &CommitStatus) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for CommitStatus

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for CommitStatus