v1beta1

type AdmissionAllowlistPatternSpec struct {
	NamePattern string `json:"namePattern"`
}

type AttestationAuthority struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec AttestationAuthoritySpec `json:"spec"`
}

type AttestationAuthorityList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata"`

	Items []AttestationAuthority `json:"items"`
}

type AttestationAuthoritySpec struct {
	NoteReference string      `json:"noteReference"`
	PublicKeys    []PublicKey `json:"publicKeys"`
}

type BuildPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec BuildPolicySpec `json:"spec"`
}

type BuildPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata"`

	Items []BuildPolicy `json:"items"`
}

type BuildPolicySpec struct {
	AttestationAuthorityName string            `yaml:"attestationAuthorityName"`
	PrivateKeySecretName     string            `yaml:"privateKeySecretName"`
	BuildRequirements        BuildRequirements `yaml:"buildRequirements"`
}

type BuildRequirements struct {
	BuiltFrom string `yaml:"builtFrom"`
}

type GenericAttestationPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec GenericAttestationPolicySpec `json:"spec"`
}

type GenericAttestationPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata"`

	Items []GenericAttestationPolicy `json:"items"`
}

type GenericAttestationPolicySpec struct {
	AdmissionAllowlistPatterns []AdmissionAllowlistPatternSpec `json:"admissionAllowlistPatterns"`
	AttestationAuthorityNames  []string                        `json:"attestationAuthorityNames"`
}

type GrafeasConfigSpec struct {
	Addr string `json:"addr"`
}

type ImageSecurityPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec ImageSecurityPolicySpec `json:"spec"`
}

type ImageSecurityPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata"`

	Items []ImageSecurityPolicy `json:"items"`
}

type ImageSecurityPolicySpec struct {
	ImageAllowlist                   []string                         `json:"imageAllowlist"`
	PackageVulnerabilityRequirements PackageVulnerabilityRequirements `json:"packageVulnerabilityRequirements"`
	AttestationAuthorityName         string                           `json:"attestationAuthorityName"`
	PrivateKeySecretName             string                           `json:"privateKeySecretName"`
}

type KritisConfig struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec KritisConfigSpec `json:"spec"`
}

type KritisConfigList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata"`

	Items []KritisConfig `json:"items"`
}

type KritisConfigSpec struct {
	// The backend to use for storing security metadata
	MetadataBackend string `json:"metadataBackend"`
	// Cron job time interval, as Duration e.g. "1h", "2s"
	CronInterval string `json:"cronInterval"`
	// Server address, with the preceding colon
	ServerAddr string `json:"serverAddr"`
	// Grafeas configuration used for communicating with Grafeas backend
	Grafeas GrafeasConfigSpec `json:"grafeas"`
}

type PackageVulnerabilityRequirements struct {
	// CVE's with fixes.
	MaximumSeverity string `json:"maximumSeverity"`
	// CVE's without fixes.
	MaximumFixUnavailableSeverity string   `json:"maximumFixNotAvailableSeverity"`
	AllowlistCVEs                 []string `json:"allowlistCVEs"`
}

type PkixPublicKey struct {
	// PublicKeyPem is the payload for a PKIX public key. Provide this as a string.
	PublicKeyPem string `json:"publicKeyPem"`
	// TODO(acamadeo): After implementing PKIX key verification, provide the
	// supported algorithm options here.
	// SignatureAlgorithm is the type of algorithm that was used to generate
	// the signature.
	SignatureAlgorithm string `json:"signatureAlgorithm"`
}

type PublicKey struct {
	// KeyId is the ID of this public key (required for PKIX keys). For PKIX
	// keys, please use a RFC3986 conformant URI. For PGP keys, this field
	// should be the OpenPGP RFC4880 V4 fingerprint of the key or be left
	// blank. If left blank, KeyId will be computed as the key's OpenPGP
	// fingerprint.
	KeyId string `json:"keyId"`
	// KeyType is the type of this public key. It should be one of "PGP" or
	// "PKIX".
	KeyType string `json:"keyType`
	// AsciiArmoredPgpPublicKey is the base64-encoded payload for a PGP public key. Provide
	// this directly as a string.
	AsciiArmoredPgpPublicKey string `json:"asciiArmoredPgpPublicKey,omitemtpy"`
	// DO NOT USE THIS FIELD: it is currently unsupported.
	// PkixPublicKey stores data for a PKIX public key.
	PkixPublicKey PkixPublicKey `json:"pkixPublicKey,omitempty"`
}

type VulnzSigningPolicy struct {
	metav1.TypeMeta   `yaml:",inline"`
	metav1.ObjectMeta `yaml:"metadata,omitempty"`

	Spec VulnzSigningPolicySpec `yaml:"spec"`
}

type VulnzSigningPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata"`

	Items []VulnzSigningPolicy `json:"items"`
}

type VulnzSigningPolicySpec struct {
	Project                          string                           `yaml:"project"`
	NoteReference                    string                           `yaml:"noteReference"`
	PackageVulnerabilityRequirements PackageVulnerabilityRequirements `yaml:"packageVulnerabilityRequirements"`
}