http4k-tools-verify/org.http4k.verify

Package-level declarations

Types

data class ArtifactCheckReport(val file: String? = null, val bundle: String? = null, val verification: VerificationStatus)

ArtifactType

enum ArtifactType : Enum<ArtifactType>

BundleVerifier

class BundleVerifier(keys: List<PublicKey>)

CosignKey

data class CosignKey(val kid: String, val fingerprint: String, val publicKey: String, val status: KeyStatus, val validFrom: Instant, val validTo: Instant? = null)

CosignKeyList

data class CosignKeyList(val schemaVersion: Int, val keys: List<CosignKey>)

Http4kVerifyExtension

abstract class Http4kVerifyExtension @Inject constructor(objects: ObjectFactory)

Http4kVerifyPlugin

class Http4kVerifyPlugin : Plugin<Project>

KeyFingerprint

class KeyFingerprint : AbstractValue<String>

KeyId

class KeyId : AbstractValue<String>

KeyListLoader

class KeyListLoader(url: Uri, log: (String) -> Unit, client: HttpHandler, cacheDir: File? = null, clock: Clock = Clock.systemUTC(), ttl: Duration = Duration.ofDays(1))

KeyResolver

class KeyResolver(keyList: CosignKeyList)

KeyRevokedException

class KeyRevokedException(kid: KeyId) : RuntimeException

KeyStatus

enum KeyStatus : Enum<KeyStatus>

LoadedKey

data class LoadedKey(val key: PublicKey, val pemText: String)

ModuleReport

data class ModuleReport(val group: String, val module: String, val version: String, val jar_sha256: String, val signing_key_fingerprint: String? = null, val checks: Map<ArtifactType, ArtifactCheckReport>)

ModuleVerification

data class ModuleVerification(val group: String, val module: String, val version: String, val jarSha256: String, val checks: Map<ArtifactType, VerificationResult?> = ArtifactType.entries.associateWith { null }, val exportedFiles: Map<String, String> = emptyMap(), val signingKeyFingerprint: KeyFingerprint)

ModuleVerifier

class ModuleVerifier(cache: VerificationCache, resolveBundleVerifier: (KeyFingerprint) -> BundleVerifier, resolveClassified: (ModuleComponentIdentifier, String) -> File?)

PluginInfo

data class PluginInfo(val version: String, val jar_sha256: String)

PublicKeyLoader

class PublicKeyLoader(publicKeyFile: File?, log: (String) -> Unit, client: HttpHandler)

Report

data class Report(val timestamp: String, val plugin: PluginInfo, val modules: List<ModuleReport>)

ResolvedKey

data class ResolvedKey(val kid: KeyId, val key: PublicKey)

VerificationCache

class VerificationCache(gradleUserHome: File = File(System.getProperty("user.home"), ".gradle"))

VerificationReport

object VerificationReport

VerificationResult

data class VerificationResult(val artifact: String, val passed: Boolean, val message: String)

VerificationStatus

enum VerificationStatus : Enum<VerificationStatus>

VerifyHttp4kDependencies

@DisableCachingByDefault(because = "Verification uses its own caching mechanism")

abstract class VerifyHttp4kDependencies : DefaultTask

Functions

extractSigningFingerprint

fun extractSigningFingerprint(provenanceJson: String): KeyFingerprint

sha256Hex

fun File.sha256Hex(): String

fun ByteArray.sha256Hex(): String