github.com/google/go-github/v69@v69.2.0/github/attestations.go (about)

     1  // Copyright 2024 The go-github AUTHORS. All rights reserved.
     2  //
     3  // Use of this source code is governed by a BSD-style
     4  // license that can be found in the LICENSE file.
     5  
     6  package github
     7  
     8  import (
     9  	"encoding/json"
    10  )
    11  
    12  // Attestation represents an artifact attestation associated with a repository.
    13  // The provided bundle can be used to verify the provenance of artifacts.
    14  //
    15  // https://docs.github.com/en/actions/security-for-github-actions/using-artifact-attestations/using-artifact-attestations-to-establish-provenance-for-builds
    16  type Attestation struct {
    17  	// The attestation's Sigstore Bundle.
    18  	// Refer to the sigstore bundle specification for more info:
    19  	// https://github.com/sigstore/protobuf-specs/blob/main/protos/sigstore_bundle.proto
    20  	Bundle       json.RawMessage `json:"bundle"`
    21  	RepositoryID int64           `json:"repository_id"`
    22  }
    23  
    24  // AttestationsResponse represents a collection of artifact attestations.
    25  type AttestationsResponse struct {
    26  	Attestations []*Attestation `json:"attestations"`
    27  }