Trust detail for a scoped release

GET

api

volumes

{scope}

{name}

{version}

trust

detail

Trust detail for a scoped release

curl --request GET \
  --url https://api.example.com/api/v1/volumes/@{scope}/{name}/{version}/trust/detail

const options = {method: 'GET'};

fetch('https://api.example.com/api/v1/volumes/@{scope}/{name}/{version}/trust/detail', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.example.com/api/v1/volumes/@{scope}/{name}/{version}/trust/detail",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.example.com/api/v1/volumes/@{scope}/{name}/{version}/trust/detail"

	req, _ := http.NewRequest("GET", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.example.com/api/v1/volumes/@{scope}/{name}/{version}/trust/detail")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body

{
  "subject": {
    "purl": "<string>",
    "integrity": "<string>"
  },
  "revision": {
    "revision": "<string>",
    "updatedAt": "2023-11-07T05:31:56Z"
  },
  "attachments": [
    {
      "id": "<string>",
      "format": {
        "family": "<string>",
        "mediaType": "<string>",
        "predicateType": "<string>",
        "profile": "<string>",
        "version": "<string>"
      },
      "artifactDigest": "<string>",
      "locator": {
        "url": "<string>",
        "embedded": "<unknown>"
      },
      "status": {
        "reason": "<string>"
      },
      "artifactSize": 1,
      "verification": {
        "subjectDigest": "<string>",
        "signatureFormat": "<string>",
        "transparencyLog": "<string>",
        "verifiedAt": "2023-11-07T05:31:56Z"
      }
    }
  ]
}

Path Parameters

scope

string

required

Maximum string length: 64

Pattern: ^(?!.*--)[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$

name

string

required

Maximum string length: 128

Pattern: ^(?!.*--)[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$

version

string

required

Pattern:

^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*))*))?(?:\+([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?$

Response

Trust detail. If the release exists but no trust artifacts are present, returns 200 OK with an empty attachments array. An empty success response does not by itself indicate successful verification, trusted status, or policy compliance.

subject

object

required

Show child attributes

revision

object

required

Show child attributes

attachments

object[]

required

May be empty when the release exists but no trust artifacts have been attached yet.

Show child attributes

Trust detail for a scoped release

curl --request GET \
  --url https://api.example.com/api/v1/volumes/@{scope}/{name}/{version}/trust/detail

const options = {method: 'GET'};

fetch('https://api.example.com/api/v1/volumes/@{scope}/{name}/{version}/trust/detail', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.example.com/api/v1/volumes/@{scope}/{name}/{version}/trust/detail",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.example.com/api/v1/volumes/@{scope}/{name}/{version}/trust/detail"

	req, _ := http.NewRequest("GET", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.example.com/api/v1/volumes/@{scope}/{name}/{version}/trust/detail")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body

{
  "subject": {
    "purl": "<string>",
    "integrity": "<string>"
  },
  "revision": {
    "revision": "<string>",
    "updatedAt": "2023-11-07T05:31:56Z"
  },
  "attachments": [
    {
      "id": "<string>",
      "format": {
        "family": "<string>",
        "mediaType": "<string>",
        "predicateType": "<string>",
        "profile": "<string>",
        "version": "<string>"
      },
      "artifactDigest": "<string>",
      "locator": {
        "url": "<string>",
        "embedded": "<unknown>"
      },
      "status": {
        "reason": "<string>"
      },
      "artifactSize": 1,
      "verification": {
        "subjectDigest": "<string>",
        "signatureFormat": "<string>",
        "transparencyLog": "<string>",
        "verifiedAt": "2023-11-07T05:31:56Z"
      }
    }
  ]
}