ContaineranalysisGoogleDevtoolsCloudbuildV1SourceProvenance
import type { ContaineranalysisGoogleDevtoolsCloudbuildV1SourceProvenance } from "https://googleapis.deno.dev/v1/containeranalysis:v1.ts";
Provenance of the source. Ways to find the original source, or verify that some source was used for this build.
§Properties
Output only. Hash(es) of the build source, which can be used to verify
that the original source integrity was maintained in the build. Note that
FileHashes
will only be populated if BuildOptions
has requested a
SourceProvenanceHash
. The keys to this map are file paths used as build
source and the values contain the hash values for those files. If the build
source came in a single package such as a gzipped tarfile (.tar.gz
), the
FileHash
will be for the single path to that file.
Output only. A copy of the build's source.connected_repository
, if
exists, with any revisions resolved.
Output only. A copy of the build's source.git_source
, if exists, with
any revisions resolved.
A copy of the build's source.repo_source
, if exists, with any revisions
resolved.
A copy of the build's source.storage_source
, if exists, with any
generations resolved.
A copy of the build's source.storage_source_manifest
, if exists, with
any revisions resolved. This feature is in Preview.