You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I have started using Witness to produce attestations for builds, and now I would like to be able to parse those attestations to extract relevant metadata to display in other systems.
I didn't really know where to start so I looked into in-toto spec and landed on:
I do think the lib should provide simple methods to parse the attestation collection. I haven't yet looked at the verification, but I was hoping to get both (verification and metadata) out of a simple interface.
I have started using Witness to produce attestations for builds, and now I would like to be able to parse those attestations to extract relevant metadata to display in other systems.
I didn't really know where to start so I looked into in-toto spec and landed on:
Parsing the
attestation.Collection
feels very tedious, and I hope there is a better way.Even at that point, I was not able to directly parse individual attestation because of the following error:
This seems to be caused by the
attestationsByType
map being empty.All this leads me to deliver that this is not the intended way to parse attestation with the library.
The text was updated successfully, but these errors were encountered: