/
registryaccess.go
53 lines (42 loc) · 1.79 KB
/
registryaccess.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
// SPDX-FileCopyrightText: 2023 SAP SE or an SAP affiliate company and Gardener contributors.
//
// SPDX-License-Identifier: Apache-2.0
package cnudie
import (
"context"
"errors"
"fmt"
"github.com/gardener/component-spec/bindings-go/ctf"
lsv1alpha1 "github.com/gardener/landscaper/apis/core/v1alpha1"
"github.com/gardener/landscaper/pkg/components/model"
)
type RegistryAccess struct {
componentResolver ctf.ComponentResolver
additionalBlobResolvers []ctf.TypedBlobResolver
}
var _ model.RegistryAccess = &RegistryAccess{}
// VerifySignature is NOT supported in cnudie, only in OCM. Will always return error.
// Check if ocm is used before calling this function.
func (r *RegistryAccess) VerifySignature(componentVersion model.ComponentVersion, name string, pkeyData []byte, caCertData []byte) error {
return errors.New("VerifySignature is not supported in CNUDIE sbom")
}
func (r *RegistryAccess) GetComponentVersion(ctx context.Context, cdRef *lsv1alpha1.ComponentDescriptorReference) (model.ComponentVersion, error) {
if cdRef == nil {
return nil, errors.New("component descriptor reference cannot be nil")
}
if cdRef.RepositoryContext == nil {
return nil, errors.New("repository context cannot be nil")
}
cd, blobResolver, err := r.componentResolver.ResolveWithBlobResolver(ctx, cdRef.RepositoryContext, cdRef.ComponentName, cdRef.Version)
if err != nil {
return nil, fmt.Errorf("unable to resolve component descriptor for ref %#v: %w", cdRef, err)
}
for i := range r.additionalBlobResolvers {
additionalBlobResolver := r.additionalBlobResolvers[i]
blobResolver, err = ctf.AggregateBlobResolvers(blobResolver, additionalBlobResolver)
if err != nil {
return nil, fmt.Errorf("unable to aggregate blob resolvers: %w", err)
}
}
return newComponentVersion(r, cd, blobResolver), nil
}