BuildSignatureResponse class

Message encapsulating the signature of the verified build.

Constructors

BuildSignatureResponse({required Input<String> keyId, required Input<String> keyType, required Input<String> publicKey, required Input<String> signature}): Creates a new BuildSignatureResponse. keyId An Id for the key used to sign. This could be either an Id for the key stored in public_key (such as the Id or fingerprint for a PGP key, or the CN for a cert), or a reference to an external key (such as a reference to a key in Cloud Key Management Service). keyType The type of the key, either stored in public_key or referenced in key_id publicKey Public key of the builder which can be used to verify that the related findings are valid and unchanged. If key_type is empty, this defaults to PEM encoded public keys. This field may be empty if key_id references an external key. For Cloud Build based signatures, this is a PEM encoded public key. To verify the Cloud Build signature, place the contents of this field into a file (public.pem). The signature field is base64-decoded into its binary representation in signature.bin, and the provenance bytes from BuildDetails are base64-decoded into a binary representation in signed.bin. OpenSSL can then verify the signature: openssl sha256 -verify public.pem -signature signature.bin signed.bin signature Signature of the related BuildProvenance, encoded in a base64 string.
const
BuildSignatureResponse.fromMap(Map<String, dynamic> map): factory

hashCode → int: The hash code for this object.
no setterinherited
keyId → Input<String>: An Id for the key used to sign. This could be either an Id for the key stored in public_key (such as the Id or fingerprint for a PGP key, or the CN for a cert), or a reference to an external key (such as a reference to a key in Cloud Key Management Service).
final
keyType → Input<String>: The type of the key, either stored in public_key or referenced in key_id
final
publicKey → Input<String>: Public key of the builder which can be used to verify that the related findings are valid and unchanged. If key_type is empty, this defaults to PEM encoded public keys. This field may be empty if key_id references an external key. For Cloud Build based signatures, this is a PEM encoded public key. To verify the Cloud Build signature, place the contents of this field into a file (public.pem). The signature field is base64-decoded into its binary representation in signature.bin, and the provenance bytes from BuildDetails are base64-decoded into a binary representation in signed.bin. OpenSSL can then verify the signature: openssl sha256 -verify public.pem -signature signature.bin signed.bin
final
runtimeType → Type: A representation of the runtime type of the object.
no setterinherited
signature → Input<String>: Signature of the related BuildProvenance, encoded in a base64 string.
final

noSuchMethod(Invocation invocation) → dynamic: Invoked when a nonexistent method or property is accessed.
inherited
toMap() → Map<String, dynamic>
toString() → String: A string representation of this object.
inherited