Class: Google::Apis::BinaryauthorizationV1::SimpleSigningAttestationCheck

Inherits:

Object

• Object
• Google::Apis::BinaryauthorizationV1::SimpleSigningAttestationCheck

Includes:

Core::Hashable, Core::JsonObjectSupport

Defined in:

lib/google/apis/binaryauthorization_v1/classes.rb,
lib/google/apis/binaryauthorization_v1/representations.rb,
lib/google/apis/binaryauthorization_v1/representations.rb

Overview

Require a signed DSSE attestation with type SimpleSigning.

Instance Attribute Summary

• #attestation_authenticators ⇒ Array<Google::Apis::BinaryauthorizationV1::AttestationAuthenticator>

  Required.

• #container_analysis_attestation_projects ⇒ Array<String>

  Optional.

Instance Method Summary

• #initialize(**args) ⇒ SimpleSigningAttestationCheck constructor

  A new instance of SimpleSigningAttestationCheck.

• #update!(**args) ⇒ Object

  Update properties of this object.

Constructor Details

#initialize(**args) ⇒ SimpleSigningAttestationCheck

Returns a new instance of SimpleSigningAttestationCheck.

# File 'lib/google/apis/binaryauthorization_v1/classes.rb', line 1584

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#attestation_authenticators ⇒ Array<Google::Apis::BinaryauthorizationV1::AttestationAuthenticator>

Required. The authenticators required by this check to verify an attestation. Typically this is one or more PKIX public keys for signature verification. Only one authenticator needs to consider an attestation verified in order for an attestation to be considered fully authenticated. In otherwords, this list of authenticators is an "OR" of the authenticator results. At least one authenticator is required. Corresponds to the JSON property attestationAuthenticators

Returns:

• (Array<Google::Apis::BinaryauthorizationV1::AttestationAuthenticator>)

# File 'lib/google/apis/binaryauthorization_v1/classes.rb', line 1568

def attestation_authenticators
  @attestation_authenticators
end

#container_analysis_attestation_projects ⇒ Array<String>

Optional. The projects where attestations are stored as Container Analysis Occurrences, in the format projects/[PROJECT_ID]. Only one attestation needs to successfully verify an image for this check to pass, so a single verified attestation found in any of container_analysis_attestation_projects is sufficient for the check to pass. A project ID must be used, not a project number. When fetching Occurrences from Container Analysis, only AttestationOccurrence kinds are considered. In the future, additional Occurrence kinds may be added to the query. Maximum number of container_analysis_attestation_projects allowed in each SimpleSigningAttestationCheck is 10. Corresponds to the JSON property containerAnalysisAttestationProjects

Returns:

• (Array<String>)

# File 'lib/google/apis/binaryauthorization_v1/classes.rb', line 1582

def container_analysis_attestation_projects
  @container_analysis_attestation_projects
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object

# File 'lib/google/apis/binaryauthorization_v1/classes.rb', line 1589

def update!(**args)
  @attestation_authenticators = args[:attestation_authenticators] if args.key?(:attestation_authenticators)
  @container_analysis_attestation_projects = args[:container_analysis_attestation_projects] if args.key?(:container_analysis_attestation_projects)
end