VerificationRule constructor

const VerificationRule({
  1. Input<AttestationSource>? attestationSource,
  2. Input<bool>? configBasedBuildRequired,
  3. Input<VerificationRuleTrustedBuilder>? trustedBuilder,
  4. Input<List<String>>? trustedSourceRepoPatterns,
})

Creates a new VerificationRule. attestationSource Specifies where to fetch the provenances attestations generated by the builder (group). configBasedBuildRequired If true, require the image to be built from a top-level configuration. trusted_source_repo_patterns specifies the repositories containing this configuration. trustedBuilder Each verification rule is used for evaluation against provenances generated by a specific builder (group). For some of the builders, such as the Google Cloud Build, users don't need to explicitly specify their roots of trust in the policy since the evaluation service can automatically fetch them based on the builder (group). trustedSourceRepoPatterns List of trusted source code repository URL patterns. These patterns match the full repository URL without its scheme (e.g. https://). The patterns must not include schemes. For example, the pattern source.cloud.google.com/my-project/my-repo-name matches the following URLs: - source.cloud.google.com/my-project/my-repo-name - git+ssh://source.cloud.google.com/my-project/my-repo-name - https://source.cloud.google.com/my-project/my-repo-name A pattern matches a URL either exactly or with * wildcards. * can be used in only two ways: 1. trailing * after hosturi/ to match varying endings; 2. trailing ** after hosturi/ to match / as well. * and ** can only be used as wildcards and can only occur at the end of the pattern after a /. (So it's not possible to match a URL that contains literal *.) For example: - github.com/my-project/my-repo is valid to match a single repo - github.com/my-project/* will match all direct repos in my-project - github.com/** matches all repos in GitHub

Implementation

const VerificationRule({
  this.attestationSource,
  this.configBasedBuildRequired,
  this.trustedBuilder,
  this.trustedSourceRepoPatterns,
});