AttestationReport (1 of 2)

`AttestationReport`classdataclass#

Re-exported from ocx_sdk._resultsView source

class AttestationReport(identifier: str, platform: str, subject_digest: str, predicate_type: str, signed: bool, transparency_log_index: int | None, bundle_digest: str | None = None, referrer_digest: str | None = None, sidecar_digest: str | None = None, certificate_identity: str | None = None, certificate_oidc_issuer: str | None = None, key_backend: str | None = None, public_key_hint: str | None = None)

ocx package attest on a single reference — no tag sweep (C-013).

Payload is enveloped (D11): from_json unwraps data. Flat, thirteen fields; per D7’s field-order rule the seven optionals move to the end even though upstream interleaves public_key_hint earlier.

Attributes

Name	Type	Description
`identifier`	`str`	The identifier that was attested.
`platform`	`str`	The attested platform.
`subject_digest`	`str`	The manifest digest the attestation covers.
`predicate_type`	`str`	The resolved predicate type URI — not the `--type` spelling the caller gave `attest(predicate_type=...)`.
`signed`	`bool`	Whether the attestation itself was signed.
`transparency_log_index`	`int \| None`	The Rekor entry index. Always present in the JSON, but `None` when nothing was logged.
`bundle_digest`	`str \| None`	Digest of the attestation bundle, when produced.
`referrer_digest`	`str \| None`	Digest under the OCI referrers API, when attached that way.
`sidecar_digest`	`str \| None`	Digest of the sidecar tag, when attached that way. `--signature-format both` populates both digest fields.
`certificate_identity`	`str \| None`	The Fulcio certificate’s identity, for keyless signing.
`certificate_oidc_issuer`	`str \| None`	The Fulcio certificate’s OIDC issuer, for keyless signing.
`key_backend`	`str \| None`	Which key backend produced the signature, carried as raw `str` (D8).
`public_key_hint`	`str \| None`	A hint identifying the verifying key, when supplied.