feat: add Attestation Chain and Triage Evidence API clients and models
- Implemented Attestation Chain API client with methods for verifying, fetching, and managing attestation chains. - Created models for Attestation Chain, including DSSE envelope structures and verification results. - Developed Triage Evidence API client for fetching finding evidence, including methods for evidence retrieval by CVE and component. - Added models for Triage Evidence, encapsulating evidence responses, entry points, boundary proofs, and VEX evidence. - Introduced mock implementations for both API clients to facilitate testing and development.
This commit is contained in:
@@ -0,0 +1,24 @@
|
||||
namespace StellaOps.Scanner.Analyzers.Native;
|
||||
|
||||
/// <summary>
|
||||
/// Full identity information extracted from a Mach-O file.
|
||||
/// </summary>
|
||||
/// <param name="CpuType">CPU type (x86_64, arm64, etc.).</param>
|
||||
/// <param name="CpuSubtype">CPU subtype for variant detection.</param>
|
||||
/// <param name="Uuid">LC_UUID in lowercase hex (no dashes).</param>
|
||||
/// <param name="IsFatBinary">Whether this is a fat/universal binary.</param>
|
||||
/// <param name="Platform">Platform from LC_BUILD_VERSION.</param>
|
||||
/// <param name="MinOsVersion">Minimum OS version from LC_VERSION_MIN_* or LC_BUILD_VERSION.</param>
|
||||
/// <param name="SdkVersion">SDK version from LC_BUILD_VERSION.</param>
|
||||
/// <param name="CodeSignature">Code signature information (if signed).</param>
|
||||
/// <param name="Exports">Exported symbols from LC_DYLD_INFO_ONLY or LC_DYLD_EXPORTS_TRIE.</param>
|
||||
public sealed record MachOIdentity(
|
||||
string? CpuType,
|
||||
uint CpuSubtype,
|
||||
string? Uuid,
|
||||
bool IsFatBinary,
|
||||
MachOPlatform Platform,
|
||||
string? MinOsVersion,
|
||||
string? SdkVersion,
|
||||
MachOCodeSignature? CodeSignature,
|
||||
IReadOnlyList<string> Exports);
|
||||
Reference in New Issue
Block a user