up

src/Excititor/__Tests/StellaOps.Excititor.Attestation.Tests/VexAttestationClientTests.cs

@@ -1,83 +1,83 @@
-using System.Collections.Immutable;
-using Microsoft.Extensions.Logging.Abstractions;
-using Microsoft.Extensions.Options;
-using StellaOps.Excititor.Attestation.Dsse;
+using System.Collections.Immutable;
+using Microsoft.Extensions.Logging.Abstractions;
+using Microsoft.Extensions.Options;
+using StellaOps.Excititor.Attestation.Dsse;
 using StellaOps.Excititor.Attestation.Signing;
 using StellaOps.Excititor.Attestation.Transparency;
 using StellaOps.Excititor.Attestation.Verification;
 using StellaOps.Excititor.Core;
-
-namespace StellaOps.Excititor.Attestation.Tests;
-
-public sealed class VexAttestationClientTests
-{
-    [Fact]
-    public async Task SignAsync_ReturnsEnvelopeDigestAndDiagnostics()
-    {
-        var signer = new FakeSigner();
-        var builder = new VexDsseBuilder(signer, NullLogger<VexDsseBuilder>.Instance);
-        var options = Options.Create(new VexAttestationClientOptions());
+
+namespace StellaOps.Excititor.Attestation.Tests;
+
+public sealed class VexAttestationClientTests
+{
+    [Fact]
+    public async Task SignAsync_ReturnsEnvelopeDigestAndDiagnostics()
+    {
+        var signer = new FakeSigner();
+        var builder = new VexDsseBuilder(signer, NullLogger<VexDsseBuilder>.Instance);
+        var options = Options.Create(new VexAttestationClientOptions());
         var verifier = new FakeVerifier();
         var client = new VexAttestationClient(builder, options, NullLogger<VexAttestationClient>.Instance, verifier);
-
-        var request = new VexAttestationRequest(
-            ExportId: "exports/456",
-            QuerySignature: new VexQuerySignature("filters"),
-            Artifact: new VexContentAddress("sha256", "deadbeef"),
-            Format: VexExportFormat.Json,
-            CreatedAt: DateTimeOffset.UtcNow,
-            SourceProviders: ImmutableArray.Create("vendor"),
-            Metadata: ImmutableDictionary<string, string>.Empty);
-
-        var response = await client.SignAsync(request, CancellationToken.None);
-
-        Assert.NotNull(response.Attestation);
-        Assert.NotNull(response.Attestation.EnvelopeDigest);
-        Assert.True(response.Diagnostics.ContainsKey("envelope"));
-    }
-
-    [Fact]
-    public async Task SignAsync_SubmitsToTransparencyLog_WhenConfigured()
-    {
-        var signer = new FakeSigner();
-        var builder = new VexDsseBuilder(signer, NullLogger<VexDsseBuilder>.Instance);
-        var options = Options.Create(new VexAttestationClientOptions());
+
+        var request = new VexAttestationRequest(
+            ExportId: "exports/456",
+            QuerySignature: new VexQuerySignature("filters"),
+            Artifact: new VexContentAddress("sha256", "deadbeef"),
+            Format: VexExportFormat.Json,
+            CreatedAt: DateTimeOffset.UtcNow,
+            SourceProviders: ImmutableArray.Create("vendor"),
+            Metadata: ImmutableDictionary<string, string>.Empty);
+
+        var response = await client.SignAsync(request, CancellationToken.None);
+
+        Assert.NotNull(response.Attestation);
+        Assert.NotNull(response.Attestation.EnvelopeDigest);
+        Assert.True(response.Diagnostics.ContainsKey("envelope"));
+    }
+
+    [Fact]
+    public async Task SignAsync_SubmitsToTransparencyLog_WhenConfigured()
+    {
+        var signer = new FakeSigner();
+        var builder = new VexDsseBuilder(signer, NullLogger<VexDsseBuilder>.Instance);
+        var options = Options.Create(new VexAttestationClientOptions());
         var transparency = new FakeTransparencyLogClient();
         var verifier = new FakeVerifier();
         var client = new VexAttestationClient(builder, options, NullLogger<VexAttestationClient>.Instance, verifier, transparencyLogClient: transparency);
-
-        var request = new VexAttestationRequest(
-            ExportId: "exports/789",
-            QuerySignature: new VexQuerySignature("filters"),
-            Artifact: new VexContentAddress("sha256", "deadbeef"),
-            Format: VexExportFormat.Json,
-            CreatedAt: DateTimeOffset.UtcNow,
-            SourceProviders: ImmutableArray.Create("vendor"),
-            Metadata: ImmutableDictionary<string, string>.Empty);
-
-        var response = await client.SignAsync(request, CancellationToken.None);
-
-        Assert.NotNull(response.Attestation.Rekor);
-        Assert.True(response.Diagnostics.ContainsKey("rekorLocation"));
-        Assert.True(transparency.SubmitCalled);
-    }
-
-    private sealed class FakeSigner : IVexSigner
-    {
-        public ValueTask<VexSignedPayload> SignAsync(ReadOnlyMemory<byte> payload, CancellationToken cancellationToken)
-            => ValueTask.FromResult(new VexSignedPayload("signature", "key"));
-    }
-
+
+        var request = new VexAttestationRequest(
+            ExportId: "exports/789",
+            QuerySignature: new VexQuerySignature("filters"),
+            Artifact: new VexContentAddress("sha256", "deadbeef"),
+            Format: VexExportFormat.Json,
+            CreatedAt: DateTimeOffset.UtcNow,
+            SourceProviders: ImmutableArray.Create("vendor"),
+            Metadata: ImmutableDictionary<string, string>.Empty);
+
+        var response = await client.SignAsync(request, CancellationToken.None);
+
+        Assert.NotNull(response.Attestation.Rekor);
+        Assert.True(response.Diagnostics.ContainsKey("rekorLocation"));
+        Assert.True(transparency.SubmitCalled);
+    }
+
+    private sealed class FakeSigner : IVexSigner
+    {
+        public ValueTask<VexSignedPayload> SignAsync(ReadOnlyMemory<byte> payload, CancellationToken cancellationToken)
+            => ValueTask.FromResult(new VexSignedPayload("signature", "key"));
+    }
+
     private sealed class FakeTransparencyLogClient : ITransparencyLogClient
     {
         public bool SubmitCalled { get; private set; }
-
-        public ValueTask<TransparencyLogEntry> SubmitAsync(DsseEnvelope envelope, CancellationToken cancellationToken)
-        {
-            SubmitCalled = true;
-            return ValueTask.FromResult(new TransparencyLogEntry(Guid.NewGuid().ToString(), "https://rekor.example/entries/123", "23", null));
-        }
-
+
+        public ValueTask<TransparencyLogEntry> SubmitAsync(DsseEnvelope envelope, CancellationToken cancellationToken)
+        {
+            SubmitCalled = true;
+            return ValueTask.FromResult(new TransparencyLogEntry(Guid.NewGuid().ToString(), "https://rekor.example/entries/123", "23", null));
+        }
+
         public ValueTask<bool> VerifyAsync(string entryLocation, CancellationToken cancellationToken)
             => ValueTask.FromResult(true);
     }

src/Excititor/__Tests/StellaOps.Excititor.Attestation.Tests/VexAttestationVerifierTests.cs

@@ -9,13 +9,13 @@ using StellaOps.Excititor.Attestation.Signing;
 using StellaOps.Excititor.Attestation.Transparency;
 using StellaOps.Excititor.Attestation.Verification;
 using StellaOps.Excititor.Core;
-
-namespace StellaOps.Excititor.Attestation.Tests;
-
-public sealed class VexAttestationVerifierTests : IDisposable
-{
-    private readonly VexAttestationMetrics _metrics = new();
-
+
+namespace StellaOps.Excititor.Attestation.Tests;
+
+public sealed class VexAttestationVerifierTests : IDisposable
+{
+    private readonly VexAttestationMetrics _metrics = new();
+
     [Fact]
     public async Task VerifyAsync_ReturnsValid_WhenEnvelopeMatches()
     {
@@ -30,7 +30,7 @@ public sealed class VexAttestationVerifierTests : IDisposable
         Assert.Equal("valid", verification.Diagnostics.Result);
         Assert.Null(verification.Diagnostics.FailureReason);
     }
-
+
     [Fact]
     public async Task VerifyAsync_ReturnsInvalid_WhenDigestMismatch()
     {
@@ -52,7 +52,7 @@ public sealed class VexAttestationVerifierTests : IDisposable
         Assert.Equal("sha256:deadbeef", verification.Diagnostics["metadata.envelopeDigest"]);
         Assert.Equal("envelope_digest_mismatch", verification.Diagnostics.FailureReason);
     }
-
+
     [Fact]
     public async Task VerifyAsync_AllowsOfflineTransparency_WhenConfigured()
     {
@@ -247,17 +247,17 @@ public sealed class VexAttestationVerifierTests : IDisposable
     private sealed class FakeTransparencyLogClient : ITransparencyLogClient
     {
         public ValueTask<TransparencyLogEntry> SubmitAsync(DsseEnvelope envelope, CancellationToken cancellationToken)
-            => ValueTask.FromResult(new TransparencyLogEntry(Guid.NewGuid().ToString(), "https://rekor.example/entries/123", "42", null));
-
-        public ValueTask<bool> VerifyAsync(string entryLocation, CancellationToken cancellationToken)
-            => ValueTask.FromResult(true);
-    }
-
-    private sealed class ThrowingTransparencyLogClient : ITransparencyLogClient
-    {
-        public ValueTask<TransparencyLogEntry> SubmitAsync(DsseEnvelope envelope, CancellationToken cancellationToken)
-            => throw new NotSupportedException();
-
+            => ValueTask.FromResult(new TransparencyLogEntry(Guid.NewGuid().ToString(), "https://rekor.example/entries/123", "42", null));
+
+        public ValueTask<bool> VerifyAsync(string entryLocation, CancellationToken cancellationToken)
+            => ValueTask.FromResult(true);
+    }
+
+    private sealed class ThrowingTransparencyLogClient : ITransparencyLogClient
+    {
+        public ValueTask<TransparencyLogEntry> SubmitAsync(DsseEnvelope envelope, CancellationToken cancellationToken)
+            => throw new NotSupportedException();
+
         public ValueTask<bool> VerifyAsync(string entryLocation, CancellationToken cancellationToken)
             => throw new HttpRequestException("rekor unavailable");
     }

src/Excititor/__Tests/StellaOps.Excititor.Attestation.Tests/VexDsseBuilderTests.cs

@@ -1,52 +1,52 @@
-using System.Collections.Immutable;
-using Microsoft.Extensions.Logging.Abstractions;
-using StellaOps.Excititor.Attestation.Dsse;
-using StellaOps.Excititor.Attestation.Models;
-using StellaOps.Excititor.Attestation.Signing;
-using StellaOps.Excititor.Core;
-
-namespace StellaOps.Excititor.Attestation.Tests;
-
-public sealed class VexDsseBuilderTests
-{
-    [Fact]
-    public async Task CreateEnvelopeAsync_ProducesDeterministicPayload()
-    {
-        var signer = new FakeSigner("signature-value", "key-1");
-        var builder = new VexDsseBuilder(signer, NullLogger<VexDsseBuilder>.Instance);
-
-        var request = new VexAttestationRequest(
-            ExportId: "exports/123",
-            QuerySignature: new VexQuerySignature("filters"),
-            Artifact: new VexContentAddress("sha256", "deadbeef"),
-            Format: VexExportFormat.Json,
-            CreatedAt: DateTimeOffset.UtcNow,
-            SourceProviders: ImmutableArray.Create("vendor"),
-            Metadata: ImmutableDictionary<string, string>.Empty);
-
-        var envelope = await builder.CreateEnvelopeAsync(request, request.Metadata, CancellationToken.None);
-
-        Assert.Equal("application/vnd.in-toto+json", envelope.PayloadType);
-        Assert.Single(envelope.Signatures);
-        Assert.Equal("signature-value", envelope.Signatures[0].Signature);
-        Assert.Equal("key-1", envelope.Signatures[0].KeyId);
-
-        var digest = VexDsseBuilder.ComputeEnvelopeDigest(envelope);
-        Assert.StartsWith("sha256:", digest);
-    }
-
-    private sealed class FakeSigner : IVexSigner
-    {
-        private readonly string _signature;
-        private readonly string _keyId;
-
-        public FakeSigner(string signature, string keyId)
-        {
-            _signature = signature;
-            _keyId = keyId;
-        }
-
-        public ValueTask<VexSignedPayload> SignAsync(ReadOnlyMemory<byte> payload, CancellationToken cancellationToken)
-            => ValueTask.FromResult(new VexSignedPayload(_signature, _keyId));
-    }
-}
+using System.Collections.Immutable;
+using Microsoft.Extensions.Logging.Abstractions;
+using StellaOps.Excititor.Attestation.Dsse;
+using StellaOps.Excititor.Attestation.Models;
+using StellaOps.Excititor.Attestation.Signing;
+using StellaOps.Excititor.Core;
+
+namespace StellaOps.Excititor.Attestation.Tests;
+
+public sealed class VexDsseBuilderTests
+{
+    [Fact]
+    public async Task CreateEnvelopeAsync_ProducesDeterministicPayload()
+    {
+        var signer = new FakeSigner("signature-value", "key-1");
+        var builder = new VexDsseBuilder(signer, NullLogger<VexDsseBuilder>.Instance);
+
+        var request = new VexAttestationRequest(
+            ExportId: "exports/123",
+            QuerySignature: new VexQuerySignature("filters"),
+            Artifact: new VexContentAddress("sha256", "deadbeef"),
+            Format: VexExportFormat.Json,
+            CreatedAt: DateTimeOffset.UtcNow,
+            SourceProviders: ImmutableArray.Create("vendor"),
+            Metadata: ImmutableDictionary<string, string>.Empty);
+
+        var envelope = await builder.CreateEnvelopeAsync(request, request.Metadata, CancellationToken.None);
+
+        Assert.Equal("application/vnd.in-toto+json", envelope.PayloadType);
+        Assert.Single(envelope.Signatures);
+        Assert.Equal("signature-value", envelope.Signatures[0].Signature);
+        Assert.Equal("key-1", envelope.Signatures[0].KeyId);
+
+        var digest = VexDsseBuilder.ComputeEnvelopeDigest(envelope);
+        Assert.StartsWith("sha256:", digest);
+    }
+
+    private sealed class FakeSigner : IVexSigner
+    {
+        private readonly string _signature;
+        private readonly string _keyId;
+
+        public FakeSigner(string signature, string keyId)
+        {
+            _signature = signature;
+            _keyId = keyId;
+        }
+
+        public ValueTask<VexSignedPayload> SignAsync(ReadOnlyMemory<byte> payload, CancellationToken cancellationToken)
+            => ValueTask.FromResult(new VexSignedPayload(_signature, _keyId));
+    }
+}