docker/attest-provider
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: get embedded TUF root from attest

Browse Source
This commit is contained in:
mrjoelkamp
2024-07-10 17:55:49 -05:00
parent ad027f80a5
commit 721091be1b
7 changed files with 176 additions and 423 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
pkg/handler/validate.go
View File

@@ -7,7 +7,6 @@ import (
"net/http"
"runtime/debug"
"github.com/docker/attest-provider/internal/embed"
"github.com/docker/attest-provider/pkg/utils"
"github.com/docker/attest/pkg/attest"
"github.com/docker/attest/pkg/config"
@@ -60,20 +59,11 @@ func NewValidateHandler(opts *ValidateHandlerOptions) (http.Handler, error) {
}
func (h *validateHandler) createTUFClient() (*tuf.TufClient, error) {
var rootBytes []byte
switch h.opts.TUFRoot {
case "dev":
rootBytes = embed.DevRoot
case "staging":
rootBytes = embed.StagingRoot
case "prod":
rootBytes = embed.ProdRoot
case "":
rootBytes = embed.DefaultRoot
default:
return nil, fmt.Errorf("invalid tuf root: %s", h.opts.TUFRoot)
root, err := tuf.GetEmbeddedTufRoot(h.opts.TUFRoot)
if err != nil {
return nil, err
}
return tuf.NewTufClient(rootBytes, h.opts.TUFOutputPath, h.opts.TUFMetadataURL, h.opts.TUFTargetsURL, tuf.NewVersionChecker())
return tuf.NewTufClient(root.Data, h.opts.TUFOutputPath, h.opts.TUFMetadataURL, h.opts.TUFTargetsURL, tuf.NewVersionChecker())
}
func (h *validateHandler) ServeHTTP(w http.ResponseWriter, req *http.Request) {