package orchestrator

Get desktop application:
View/edit binary Protocol Buffers messages

These endpoints allow Verifier plugins to call Ratify instead of having to know about and communicate directly with any given Store plugin.

• rpc GetBlobs (GetBlobsRequest, GetBlobsResponse)

  orchestrator.proto:14

  Fetch the contents of blob.

  message GetBlobsRequest

  orchestrator.proto:20

  The request for GetBlobContent

  • optional common.Descriptor artifact = 1

    The artifact for which to retrieve blobs.

  • string storePluginName = 2

    The name of the appropriate configured Store plugin to call.

  message GetBlobsResponse

  orchestrator.proto:28

  The response for GetBlobContent

  • optional common.Descriptor artifact = 1

  • repeated bytes content = 2

• rpc GetManifest (GetManifestRequest, GetManifestResponse)

  orchestrator.proto:16

  Fetch the contents of a given manifest.

  message GetManifestRequest

  orchestrator.proto:34

  The request for GetManifest

  • optional common.Descriptor subject = 1

    The subject.

  • optional common.Referrer referrer = 2

    The referrer for which the manifest is being requested.

  • string storePluginName = 3

    The name of the appropriate configured Store plugin to call.

  message GetManifestResponse

  orchestrator.proto:44

  The response for GetManifest

  • optional common.Manifest manifest = 1

    The fully realized Manifest object for the referrer.

The request for VerifySubject

• string subjectReference = 1

  The subject under verification.

• repeated google.protobuf.Struct storeConfigurations = 2

  The configurations of the store plugins to be used.

• repeated google.protobuf.Struct verifierConfigurations = 3

  The configurations of the verifier plugins to be used.

The response for VerifySubject

• string subjectReference = 1

  The subject under verification

• repeated VerifySubjectResponse.ReferrerVerificationReport results = 2

  The verification results for all artifacts which reference the given subject.

A collection of verification results for a single Referrer.

Used in: VerifySubjectResponse

• optional common.Referrer referrer = 1

  The artifact being verified

• repeated VerificationReport reports = 2

  The results of all verifier evaluation for the artifact.

• repeated ReferrerVerificationReport children = 3

  Verification results for all nested artifacts (artifacts which refer to this one).

what a single verifier returns

Used in: ReferrerVerificationReport

• string verifierName = 1

  The name of the verifier which evaluated the artifact.

• bool valid = 2

  Whether the artifact passed validation

• repeated string reasons = 3

  Details surrounding why the verifier considered the artifact valid or invalid

• repeated VerificationReport.ExtensionData data = 4

  Custom metadata realized as a part of verification process. These properties can be used to compose more robust constraints.

Used in: VerificationReport

• map<string, string> values = 1