VerificationReport

VerificationReportclassdataclass#

Re-exported from ocx_sdk._resultsView source

class VerificationReport(subject_digest: str, referrer_digest: str, certificate_identity: str, certificate_oidc_issuer: str, signed_at: str, signatures: tuple[SignatureEntry, ...] = ())

ocx package verify (C-012).

Payload is enveloped (D11): from_json unwraps data.

Attributes

Name	Type	Description
subject_digest	str	The manifest digest that was verified.
referrer_digest	str	The verified object’s own digest. Not always a manifest digest — see SignatureEntry.referrer_digest.
certificate_identity	str	The keyless identity pinned for verification. Plain String upstream (verification.rs:115) — always emitted, on both the keyless and key-based paths.
certificate_oidc_issuer	str	The keyless OIDC issuer pinned for verification. Always emitted (verification.rs:117), same as above.
signed_at	str	When the signature was produced, as ocx spelled it. Always emitted (verification.rs:119).
signatures	tuple[SignatureEntry, ...]	Matching signatures found. Absent, not empty, when there were none (D7).

certificate_identityattributeinstance attribute#

View source

certificate_identity: str

certificate_oidc_issuerattributeinstance attribute#

View source

certificate_oidc_issuer: str

referrer_digestattributeinstance attribute#

View source

referrer_digest: str

signaturesattributeclass attributeinstance attribute#

View source

signatures: tuple[SignatureEntry, ...] = ()

signed_atattributeinstance attribute#

View source

signed_at: str

subject_digestattributeinstance attribute#

View source

subject_digest: str

from_jsonmethodclassmethod#

View source

def from_json(raw: str) -> VerificationReport

Parse ocx --format json package verify output.