Expand description
type PackageProvenance = {
packageName: string;
runInvocationURI: string;
sourceCommit: string;
sourceRef: string;
sourceRepo: string;
verifyAddonBySha256(sha256: string): Promise<void>;
verifyAddonFromFile(filePath: string): Promise<void>;
}Properties§
Methods§
- verifyAddonBySha256
Verify a single native-addon binary whose sha256 the caller already has.
- verifyAddonFromFile
Hash the file at
filePathand verify its attestation against this provenance.
Provenance handle returned by verifyPackage.