mindersec / minder / 35153045729

62%

push

github

Expose raw OCI manifest/index via GetRawManifest (#6776)

* fixing error

* Expose raw OCI manifest/index via GetRawManifest

Part of #6774 (second half). Adds GetRawManifest to the OCI provider
interface so rules can inspect an artifact's manifest or image index
exactly as returned by the registry, without a multi-platform index
being silently resolved to a single platform.

Scoped to providers implementing the OCI interface (DockerHub, Quay)
for now. GitHub/GHCR doesn't implement this interface today; that is
a known, documented gap pending a decision on whether/how to extend
GHCR.

* Shorten imageInfo and test doc comments; test Manifest round-trip

Shortened the imageInfo struct comment and TestImageInfoRegoInputShape's
doc comment.

Added a Manifest field to the test's sample imageInfo and assertions
checking it survives the rego round-trip with mediaType, digest, and
content keys.

* Shortened buildRepository, getRegistryForProvider, imageRef, and
imageInfo doc comments, and the inline OCI-check comment in
getVerificationResult.

* Restore missing SPDX license header

* fix: resolve artifact lint issues

* Regenerate Go dependencies and mocks

* Revert "Regenerate Go dependencies and mocks"

This reverts commit 135e3a4a3.

* Fix mock header to match canonical make gen output

7 of 26 new or added lines in 3 files covered. (26.92%)

21995 of 35508 relevant lines covered (61.94%)

40.17 hits per line