List of all items

Structs

• CustomSection
• KeyPair
• Module
• ModuleStreamReader
• PublicKey
• PublicKeySet
• SecretKey
• SectionsIterator
• SignatureData
• SignatureForHashes
• SignatureInfo
• SignedHashes
• StandardSection
• airgapped::AirGappedConfig
• airgapped::AirGappedVerifier
• airgapped::BundleSignature
• airgapped::CertificateAuthority
• airgapped::DeviceSecurityState
• airgapped::IdentityRequirements
• airgapped::MemoryStorage
• airgapped::ModuleVersionInfo
• airgapped::SignedTrustBundle
• airgapped::SignerIdentity
• airgapped::TransparencyLog
• airgapped::TrustBundle
• airgapped::ValidityPeriod
• airgapped::VerificationResult
• airgapped::storage::CompiledKeyStore
• airgapped::storage::CompiledTrustStore
• airgapped::storage::FileKeyStore
• airgapped::storage::FileTrustStore
• airgapped::storage::KeyMetadata
• airgapped::storage::MemoryKeyStore
• airgapped::storage::MemoryTrustStore
• airgapped::storage::StorageMetadata
• airgapped::tuf::CertChainEntry
• airgapped::tuf::CertificateAuthorityEntry
• airgapped::tuf::CertificateEntry
• airgapped::tuf::CtlogEntry
• airgapped::tuf::LogIdEntry
• airgapped::tuf::PublicKeyEntry
• airgapped::tuf::SigstoreTrustedRoot
• airgapped::tuf::SubjectEntry
• airgapped::tuf::TimestampAuthorityEntry
• airgapped::tuf::TlogEntry
• airgapped::tuf::ValidForEntry
• audit::AuditConfig
• composition::ArtifactDescriptor
• composition::AttestationSignature
• composition::BuildProvenance
• composition::CertificateValidityPolicy
• composition::ChainVerificationPolicy
• composition::ChainVerificationResult
• composition::ComponentRef
• composition::ComponentSubstitution
• composition::CompositionManifest
• composition::DependencyGraph
• composition::DeviceAttestation
• composition::HardwareCompositionManifest
• composition::InTotoAttestation
• composition::InTotoBuilder
• composition::InTotoConfigSource
• composition::InTotoInvocation
• composition::InTotoMaterial
• composition::InTotoPredicate
• composition::InTotoSubject
• composition::InclusionProof
• composition::InputArtifact
• composition::InputSignatureInfo
• composition::IntegratorInfo
• composition::KeylessVerificationConfig
• composition::ProvenanceBuilder
• composition::RootComponent
• composition::Sbom
• composition::SbomComponent
• composition::SbomDependency
• composition::SbomExternalReference
• composition::SbomHash
• composition::SbomMetadata
• composition::SbomTool
• composition::SignatureFreshnessPolicy
• composition::SourceAllowList
• composition::TimestampPolicy
• composition::ToolInfo
• composition::TransformationAttestation
• composition::TransformationAttestationBuilder
• composition::TransformationAuditTrail
• composition::TransparencyLogEntry
• composition::TrustedPublicKey
• composition::TrustedToolInfo
• composition::ValidationConfig
• composition::ValidationResult
• composition::VersionPolicy
• dsse::DsseEnvelope
• dsse::DsseSignature
• dsse::Ed25519DsseSigner
• dsse::Ed25519DsseVerifier
• http::HttpResponse
• http::PinnedHttpClient
• http::SimpleHttpClient
• intoto::DigestSet
• intoto::ResourceDescriptor
• intoto::Statement
• intoto::Subject
• keyless::CertificatePool
• keyless::FulcioCertificate
• keyless::FulcioClient
• keyless::GitHubOidcProvider
• keyless::GitLabOidcProvider
• keyless::GoogleOidcProvider
• keyless::KeylessConfig
• keyless::KeylessSignature
• keyless::KeylessSigner
• keyless::KeylessVerificationResult
• keyless::KeylessVerifier
• keyless::OidcToken
• keyless::PinnedCertVerifier
• keyless::PinningConfig
• keyless::RekorClient
• keyless::RekorEntry
• keyless::RekorKeyring
• keyless::cert_pinning::PinnedCertVerifier
• keyless::cert_pinning::PinningConfig
• keyless::cert_verifier::CertChain
• keyless::cert_verifier::CertificateAuthority
• keyless::cert_verifier::CertificateEntry
• keyless::cert_verifier::CertificatePool
• keyless::cert_verifier::Subject
• keyless::cert_verifier::TrustedRoot
• keyless::cert_verifier::ValidFor
• keyless::fulcio::FulcioCertificate
• keyless::fulcio::FulcioClient
• keyless::oidc::GitHubOidcProvider
• keyless::oidc::GitLabOidcProvider
• keyless::oidc::GoogleOidcProvider
• keyless::oidc::OidcToken
• keyless::rate_limit::RateLimitConfig
• keyless::rate_limit::RateLimiter
• keyless::rate_limit::RetryPolicy
• keyless::rate_limit::ServerRateLimitInfo
• keyless::rekor::RekorClient
• keyless::rekor::RekorEntry
• keyless::rekor_verifier::Checkpoint
• keyless::rekor_verifier::CheckpointNote
• keyless::rekor_verifier::CheckpointSignature
• keyless::rekor_verifier::InclusionProof
• keyless::rekor_verifier::RekorKeyring
• keyless::signer::KeylessConfig
• keyless::signer::KeylessSigner
• keyless::signer::KeylessVerificationResult
• keyless::signer::KeylessVerifier
• keyless::transport::PinnedRustlsConnector
• keyless::transport::PinnedRustlsTransport
• metrics::Histogram
• metrics::LabeledCounter
• metrics::SigningMetrics
• metrics::SigningTimer
• platform::Attestation
• platform::KeyHandle
• platform::SoftwareEd25519Signer
• platform::SoftwareEd25519Verifier
• platform::software::SoftwareProvider
• policy::KeylessConfig
• policy::Policy
• policy::PolicyMetadata
• policy::SignaturePolicy
• policy::SlsaPolicy
• policy::TrustedBuilderPolicy
• policy::TrustedPublicKeyConfig
• policy::TrustedToolPolicy
• policy::eval::PolicyEvaluationResult
• policy::eval::PolicySummary
• policy::eval::RuleResult
• policy::slsa::SlsaLevelAnalysis
• provisioning::CertificateConfig
• provisioning::ProvisioningResult
• provisioning::ca::CAConfig
• provisioning::ca::PrivateCA
• provisioning::csr::CertificateSigningRequest
• provisioning::device::DeviceIdentity
• provisioning::session::ProvisioningSession
• provisioning::session::ProvisioningStats
• provisioning::verification::OfflineVerifier
• provisioning::verification::OfflineVerifierBuilder
• provisioning::wasm_signing::SignatureInfo
• provisioning::wasm_signing::VerificationResult
• slsa::BuildDefinition
• slsa::BuildMetadata
• slsa::Builder
• slsa::Provenance
• slsa::RunDetails
• time::BuildTimeSource
• time::FixedTimeSource
• time::SystemTimeSource
• time::TimeValidationConfig

Enums

• Section
• SectionId
• WSError
• airgapped::GracePeriodBehavior
• airgapped::SignatureAlgorithm
• airgapped::VerificationWarning
• audit::LogDestination
• composition::AttestationSignatureResult
• composition::ChainVerificationMode
• composition::SignatureStatus
• composition::TransformationType
• composition::ValidationError
• composition::ValidationMode
• composition::VersionConstraint
• keyless::CertVerificationError
• keyless::cert_verifier::CertVerificationError
• metrics::SigningFailure
• metrics::ValidationFailure
• platform::AttestationType
• platform::HardwareError
• platform::SecurityLevel
• platform::SigningAlgorithm
• policy::Enforcement
• policy::PolicyError
• policy::slsa::SlsaLevel
• provisioning::ca::CAType
• slsa::SlsaLevel

Traits

• SectionLike
• airgapped::SecureStorage
• airgapped::storage::KeyStore
• airgapped::storage::TrustStore
• dsse::DsseSigner
• dsse::DsseVerifier
• http::HttpClient
• keyless::OidcProvider
• keyless::oidc::OidcProvider
• platform::HardwareSigner
• platform::HardwareVerifier
• platform::SecureKeyProvider
• time::TimeSource

Functions

• airgapped::tuf::fetch_sigstore_trusted_root
• airgapped::tuf::fetch_sigstore_trusted_root_from_url
• airgapped::tuf::parse_trusted_root
• airgapped::tuf::trusted_root_to_bundle
• audit::init
• audit::log_key_generation
• audit::log_signing_attempt
• audit::log_signing_failure
• audit::log_signing_success
• audit::log_verification_attempt
• audit::log_verification_failure
• audit::log_verification_success
• audit::new_correlation_id
• audit::redact_email
• composition::embed_all_provenance
• composition::embed_build_provenance
• composition::embed_composition_manifest
• composition::embed_device_attestation
• composition::embed_intoto_attestation
• composition::embed_sbom
• composition::embed_slsa_provenance
• composition::embed_transformation_attestation
• composition::embed_transformation_audit_trail
• composition::embed_transformation_dsse
• composition::embed_transparency_log_entry
• composition::extract_all_provenance
• composition::extract_all_transformation_attestations
• composition::extract_and_verify_dsse
• composition::extract_build_provenance
• composition::extract_composition_manifest
• composition::extract_device_attestation
• composition::extract_dsse_attestation
• composition::extract_intoto_attestation
• composition::extract_sbom
• composition::extract_slsa_provenance
• composition::extract_transformation_attestation
• composition::extract_transformation_audit_trail
• composition::extract_transformation_from_dsse
• composition::extract_transparency_log_entry
• composition::remove_transformation_attestations
• composition::validate_all_timestamps
• composition::validate_attestation_timestamps
• composition::validate_device_attestation
• composition::validate_manifest_timestamps
• composition::validate_provenance_timestamps
• composition::verify_attestation_signature
• composition::verify_audit_trail
• composition::verify_transformation_chain
• keyless::cert_pinning::check_pinning_requirement
• keyless::cert_pinning::create_pinned_rustls_config
• keyless::check_pinning_requirement
• keyless::create_pinned_rustls_config
• keyless::detect_oidc_provider
• keyless::merkle::compute_leaf_hash
• keyless::merkle::compute_node_hash
• keyless::merkle::verify_inclusion_proof
• keyless::oidc::detect_oidc_provider
• keyless::transport::create_agent_with_optional_pinning
• keyless::transport::create_pinned_agent
• keyless::transport::create_standard_agent
• metrics::global_metrics
• new_delimiter_section
• platform::detect_platform
• platform::list_available_providers
• policy::eval::evaluate_policy
• policy::slsa::detect_slsa_level
• policy::slsa::detect_slsa_level_detailed
• policy::slsa::meets_slsa_level
• provisioning::wasm_signing::inspect_signatures
• provisioning::wasm_signing::sign_with_certificate
• provisioning::wasm_signing::verify_all_certificates
• provisioning::wasm_signing::verify_with_certificate
• secure_file::check_permissions
• secure_file::create_secure_file
• secure_file::read_secure
• secure_file::read_secure_string
• secure_file::set_secure_permissions
• secure_file::write_secure
• secure_file::write_secure_string
• signature_info_from_detached
• signature_info_from_file
• signature_info_from_reader
• time::parse_timestamp
• time::validate_timestamp
• varint::get32
• varint::get7
• varint::get_slice
• varint::put
• varint::put_slice

Type Aliases

• BoxedPredicate
• Header
• composition::AllProvenanceData

Constants

• MAX_HASHES
• MAX_SIGNATURES
• SIGNATURE_SECTION_DELIMITER_NAME
• SIGNATURE_SECTION_HEADER_NAME
• airgapped::TRUST_BUNDLE_FORMAT_VERSION
• airgapped::tuf::SIGSTORE_TRUSTED_ROOT_URL
• composition::BUILD_PROVENANCE_SECTION
• composition::COMPOSITION_MANIFEST_SECTION
• composition::DSSE_ATTESTATION_SECTION
• composition::INTOTO_ATTESTATION_SECTION
• composition::SBOM_SECTION
• composition::TRANSFORMATION_ATTESTATION_SECTION
• composition::TRANSFORMATION_AUDIT_TRAIL_SECTION
• dsse::payload_types::CYCLONEDX
• dsse::payload_types::IN_TOTO
• dsse::payload_types::SLSA_PROVENANCE
• dsse::payload_types::WSC_TRANSFORMATION
• intoto::STATEMENT_TYPE_V1
• intoto::predicate_types::CYCLONEDX
• intoto::predicate_types::SLSA_PROVENANCE_V02
• intoto::predicate_types::SLSA_PROVENANCE_V1
• intoto::predicate_types::SLSA_VSA_V1
• intoto::predicate_types::SPDX
• intoto::predicate_types::WSC_COMPOSITION_V1
• intoto::predicate_types::WSC_TRANSFORMATION_V1
• keyless::KEYLESS_SIG_TYPE
• keyless::KEYLESS_VERSION
• keyless::STANDARD_SIG_TYPE
• secure_file::SECURE_FILE_MODE
• slsa::PROVENANCE_V1
• slsa::build_types::BAZEL_BUILD
• slsa::build_types::CARGO_BUILD
• slsa::build_types::TRANSFORMATION
• slsa::build_types::WASM_BUILD
• slsa::build_types::WASM_COMPOSITION
• slsa::build_types::WASM_OPTIMIZATION
• time::BUILD_TIMESTAMP
• varint::MAX_SLICE_LEN