chore(deps): CycloneDX PredicateType changed to use in-toto-golang

Signed-off-by: masahiro331 <m_fujimura@r.recruit.co.jp>
sigstore · Jul 13, 2022 · 06ddc4e · 06ddc4e
1 parent 161b0c7
commit 06ddc4e
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 7 deletions.
diff --git a/pkg/cosign/attestation/attestation.go b/pkg/cosign/attestation/attestation.go
@@ -58,12 +58,6 @@ type CosignVulnStatement struct {
 	Predicate CosignVulnPredicate `json:"predicate"`
 }
 
-// TODO: upstream to in-toto
-type CycloneDXStatement struct {
-	in_toto.StatementHeader
-	Predicate interface{} `json:"predicate"`
-}
-
 type Invocation struct {
 	Parameters interface{} `json:"parameters"`
 	URI        string      `json:"uri"`

diff --git a/pkg/policy/attestation.go b/pkg/policy/attestation.go
@@ -114,7 +114,7 @@ func AttestationToPayloadJSON(ctx context.Context, predicateType string, verifie
 			return nil, fmt.Errorf("marshaling SPDXStatement: %w", err)
 		}
 	case options.PredicateCycloneDX:
-		var cyclonedxStatement attestation.CycloneDXStatement
+		var cyclonedxStatement in_toto.CycloneDXStatement
 		if err := json.Unmarshal(decodedPayload, &cyclonedxStatement); err != nil {
 			return nil, fmt.Errorf("unmarshaling CycloneDXStatement: %w", err)
 		}