6 Commits

Author	SHA1	Message	Date
Justin Chadwell	56950ece69	inspect: lazily load attestation data ... Delay loading the attestation data immediately, and only compute it upon request. We do this using a deferred function which allows to define the computation in the same place as before, but perform the computation later. With this patch, we ensure that the attestation data is only pulled from the remote if it is actually referenced in the format string - otherwise, we can skip it, for improved performance. Signed-off-by: Justin Chadwell <me@jedevc.com>	2023-01-10 13:00:42 +00:00
Justin Chadwell	484823c97d	inspect: change additional spdxs to not have duplicates ... Signed-off-by: Justin Chadwell <me@jedevc.com>	2023-01-09 19:03:23 +00:00
Justin Chadwell	3ce17b01dc	inspect: provide access to multiple spdx documents ... Signed-off-by: Justin Chadwell <me@jedevc.com>	2023-01-09 18:42:26 +00:00
Justin Chadwell	e68c566c1c	inspect: parse sbom and provenance into json structs ... Signed-off-by: Justin Chadwell <me@jedevc.com>	2023-01-09 18:09:43 +00:00
Justin Chadwell	19d16aa941	inspect: break after first matching attestation ... Signed-off-by: Justin Chadwell <me@jedevc.com>	2023-01-09 18:09:06 +00:00
CrazyMax	e6b9aba997	imagetools inspect: handle provenance and sbom ... use stub structs for SLSA/SBOM while waiting for go-imageinspect library to be public. Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>	2023-01-05 17:34:30 +01:00