SignatureEntry (1 of 2)

SignatureEntryclassdataclass#

Re-exported from ocx_sdk._resultsView source

class SignatureEntry(signature_format: str, discovery_method: str, key_backend: str, referrer_digest: str, certificate_identity: str | None = None, certificate_oidc_issuer: str | None = None, signed_at: str | None = None, rekor_log_index: int | None = None)

One signature verify found on the inspected object (C-012).

Field list verified against verification.rs:50-85.

Attributes

Name	Type	Description
signature_format	str	Which format this entry is, carried as raw str (D8).
discovery_method	str	How ocx found it — referrer API or sidecar tag, carried as raw str (D8).
key_backend	str	Which key backend verified it, carried as raw str (D8).
referrer_digest	str	This signature’s own digest. Not always a manifest digest — for a simplesigning sidecar it is a layer blob digest; feeding it to a manifest fetch 404s.
certificate_identity	str | None	The Fulcio certificate’s identity, when the signature is keyless.
certificate_oidc_issuer	str | None	The Fulcio certificate’s OIDC issuer, when the signature is keyless.
signed_at	str | None	When the signature was produced, as ocx spelled it, when present.
rekor_log_index	int | None	The Rekor entry index, when present. Named differently from SignatureReport/AttestationReport’s transparency_log_index — same concept, two wire names, and unlike those two structs this field is absent rather than always-present-nullable. Do not unify the handling.

certificate_identityattributeclass attributeinstance attribute#

View source

certificate_identity: str | None = None

certificate_oidc_issuerattributeclass attributeinstance attribute#

View source

certificate_oidc_issuer: str | None = None

discovery_methodattributeinstance attribute#

View source

discovery_method: str

key_backendattributeinstance attribute#

View source

key_backend: str

referrer_digestattributeinstance attribute#

View source

referrer_digest: str

rekor_log_indexattributeclass attributeinstance attribute#

View source

rekor_log_index: int | None = None

signed_atattributeclass attributeinstance attribute#

View source

signed_at: str | None = None

from_dictmethodclassmethod#

View source

def from_dict(data: Mapping[str, Any]) -> SignatureEntry

Build from one decoded entry of VerificationReport.signatures.