pub struct SupplyChainTrustSignal {
pub scorecard: Option<ScorecardSummary>,
pub provenance: Option<ProvenanceStatus>,
}Expand description
The ecosystem-agnostic aggregate assembled from deps.dev’s two calls, consumed by the hover-formatting layer.
Every field being None means “nothing to render”. trust_signal’s
success path never actually produces that all-None shape today
(provenance is always Some once the version call itself succeeds),
so push_trust_signal_hover_section’s own scorecard.is_none() && provenance.is_none() check is defensive, not dead. Modelling both
fields as independently Option still matters: see
ProvenanceStatus’s docs for why provenance in particular stays
Option rather than collapsing into scorecard’s shape.
Fields§
§scorecard: Option<ScorecardSummary>The linked source repository’s OpenSSF Scorecard, when one could be resolved and fetched (FR-002/FR-003/FR-005).
provenance: Option<ProvenanceStatus>This version’s SLSA/attestation provenance status, when the version-level query itself succeeded (FR-004).
Trait Implementations§
Source§impl Clone for SupplyChainTrustSignal
impl Clone for SupplyChainTrustSignal
Source§fn clone(&self) -> SupplyChainTrustSignal
fn clone(&self) -> SupplyChainTrustSignal
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read moreSource§impl Debug for SupplyChainTrustSignal
impl Debug for SupplyChainTrustSignal
Source§impl Default for SupplyChainTrustSignal
impl Default for SupplyChainTrustSignal
Source§fn default() -> SupplyChainTrustSignal
fn default() -> SupplyChainTrustSignal
Source§impl PartialEq for SupplyChainTrustSignal
impl PartialEq for SupplyChainTrustSignal
Source§fn eq(&self, other: &SupplyChainTrustSignal) -> bool
fn eq(&self, other: &SupplyChainTrustSignal) -> bool
self and other values to be equal, and is used by ==.