Class BuildSignature
Message encapsulating the signature of the verified build.
Implements
Inherited Members
Namespace: Google.Apis.ContainerAnalysis.v1beta1.Data
Assembly: Google.Apis.ContainerAnalysis.v1beta1.dll
Syntax
public class BuildSignature : IDirectResponseSchema
Properties
ETag
The ETag of the item.
Declaration
public virtual string ETag { get; set; }
Property Value
Type | Description |
---|---|
string |
KeyId
An ID for the key used to sign. This could be either an ID for the key stored in public_key
(such as the
ID or fingerprint for a PGP key, or the CN for a cert), or a reference to an external key (such as a
reference to a key in Cloud Key Management Service).
Declaration
[JsonProperty("keyId")]
public virtual string KeyId { get; set; }
Property Value
Type | Description |
---|---|
string |
KeyType
The type of the key, either stored in public_key
or referenced in key_id
.
Declaration
[JsonProperty("keyType")]
public virtual string KeyType { get; set; }
Property Value
Type | Description |
---|---|
string |
PublicKey
Public key of the builder which can be used to verify that the related findings are valid and unchanged. If
key_type
is empty, this defaults to PEM encoded public keys. This field may be empty if key_id
references an external key. For Cloud Build based signatures, this is a PEM encoded public key. To verify
the Cloud Build signature, place the contents of this field into a file (public.pem). The signature field is
base64-decoded into its binary representation in signature.bin, and the provenance bytes from BuildDetails
are base64-decoded into a binary representation in signed.bin. OpenSSL can then verify the signature:
openssl sha256 -verify public.pem -signature signature.bin signed.bin
Declaration
[JsonProperty("publicKey")]
public virtual string PublicKey { get; set; }
Property Value
Type | Description |
---|---|
string |
Signature
Required. Signature of the related BuildProvenance
. In JSON, this is base-64 encoded.
Declaration
[JsonProperty("signature")]
public virtual string Signature { get; set; }
Property Value
Type | Description |
---|---|
string |