Method GetFromRoot

app/controlplane/pkg/data/referrer.go:148–224

(ctx context.Context, digest string, orgIDs []uuid.UUID, p *pagination.CursorOptions, filters ...biz.GetFromRootFilter)

}

func (r *ReferrerRepo) GetFromRoot(ctx context.Context, digest string, orgIDs []uuid.UUID, p *pagination.CursorOptions, filters ...biz.GetFromRootFilter) (*biz.StoredReferrer, string, error) {
	ctx, span := otelx.Start(ctx, referrerRepoTracer, "ReferrerRepo.GetFromRoot")
	defer span.End()

	opts := &biz.GetFromRootFilters{}
	for _, f := range filters {
		f(opts)
	}

	// Find the referrer from its digest + artifactType (optional)
	// if there is more than 1 item we return ReferrerAmbiguous error
	// filter by the allowed organizations and by the visibility of the attached workflows if needed
	predicateReferrer := []predicate.Referrer{
		referrer.Digest(digest),
	}

	// We might be filtering by the rootKind, this will prevent ambiguity
	if opts.RootKind != nil {
		predicateReferrer = append(predicateReferrer, referrer.Kind(*opts.RootKind))
	}

	// Prepare the workflow query predicate
	predicateWF := []predicate.Workflow{
		workflow.DeletedAtIsNil(), workflow.HasOrganizationWith(organization.IDIn(orgIDs...)),
	}

	// optionally attaching its visibility
	if opts.Public != nil {
		predicateWF = append(predicateWF, workflow.Public(*opts.Public))
	}

	// Attach the workflow predicate
	predicateReferrer = append(predicateReferrer, referrer.HasWorkflowsWith(predicateWF...))

	// If a project filter is requested, attach it as a subquery predicate. An attestation root
	// matches only when its digest is one of the attestation_digests produced by a workflow run
	// in the requested project (and, when set, version). Non-attestation roots pass through here
	// and are validated later through their references. The cost is independent of how many
	// runs the project has — Postgres executes it as a single semi-join, no Go-side digest list.
	var projectPred predicate.Referrer
	if opts.ProjectName != nil && *opts.ProjectName != "" {
		version := ""
		if opts.ProjectVersion != nil {
			version = *opts.ProjectVersion
		}
		projectPred = r.projectScopePredicate(*opts.ProjectName, version, orgIDs, opts.ProjectIDs, opts.Public)
		predicateReferrer = append(predicateReferrer, referrer.Or(
			referrer.KindNEQ(biz.ReferrerAttestationType),
			projectPred,
		))
	}

	refs, err := r.data.DB.Referrer.Query().Where(predicateReferrer...).WithWorkflows().All(ctx)
	if err != nil {
		return nil, "", fmt.Errorf("failed to query referrer: %w", err)
	}

	// No items found