feat: add input atts to result summary

attestation/types.go

@@ -69,13 +69,13 @@ type Extension struct {
 
 type EnvelopeReference struct {
 	*Envelope
-	ResourceDescriptor *ResourceDescriptor
+	ResourceDescriptor *ResourceDescriptor `json:"resourceDescriptor"`
 }
 
 type ResourceDescriptor struct {
 	MediaType string            `json:"mediaType"`
 	Digest    map[string]string `json:"digest"`
-	URI       string            `json:"uri"`
+	URI       string            `json:"uri,omitempty"`
 }
 
 type AnnotatedStatement struct {

attestation/vsa.go

@@ -12,13 +12,13 @@ const (
 )
 
 type VSAPredicate struct {
-	Verifier           VSAVerifier           `json:"verifier"`
-	TimeVerified       string                `json:"timeVerified"`
-	ResourceURI        string                `json:"resourceUri"`
-	Policy             VSAPolicy             `json:"policy"`
-	InputAttestations  []VSAInputAttestation `json:"inputAttestations,omitempty"`
-	VerificationResult string                `json:"verificationResult"`
-	VerifiedLevels     []string              `json:"verifiedLevels"`
+	Verifier           VSAVerifier          `json:"verifier"`
+	TimeVerified       string               `json:"timeVerified"`
+	ResourceURI        string               `json:"resourceUri"`
+	Policy             VSAPolicy            `json:"policy"`
+	InputAttestations  []ResourceDescriptor `json:"inputAttestations,omitempty"`
+	VerificationResult string               `json:"verificationResult"`
+	VerifiedLevels     []string             `json:"verifiedLevels"`
 }
 
 type VSAVerifier struct {
@@ -31,11 +31,6 @@ type VSAPolicy struct {
 	DownloadLocation string            `json:"downloadLocation,omitempty"`
 }
 
-type VSAInputAttestation struct {
-	Digest    map[string]string `json:"digest"`
-	MediaType string            `json:"mediaType"`
-}
-
 func ToVSAResourceURI(sub intoto.Subject) (string, error) {
 	// parse purl
 	purl, err := packageurl.FromString(sub.Name)