Function createAndPushPolicyBundle

acceptance/image/image.go:1186–1224

createAndPushPolicyBundle creates a OCI policy bundle with the given files as layers

(ctx context.Context, imageName string, files *godog.Table)

// createAndPushPolicyBundle creates a OCI policy bundle with the given files as
// layers
func createAndPushPolicyBundle(ctx context.Context, imageName string, files *godog.Table) (context.Context, error) {
	bundle := mutate.MediaType(empty.Image, types.OCIManifestSchema1)
	bundle = mutate.ConfigMediaType(bundle, types.OCIConfigJSON)

	// add each row as a layer to the bundle
	for _, row := range files.Rows {
		file := row.Cells[0].Value

		source := row.Cells[1].Value

		bytes, err := os.ReadFile(path.Join("acceptance", source))
		if err != nil {
			return ctx, err
		}

		if bundle, err = mutate.Append(bundle, mutate.Addendum{
			MediaType: openPolicyAgentData,
			Layer:     s.NewLayer(bytes, openPolicyAgentData),
			Annotations: map[string]string{
				title: file,
			},
		}); err != nil {
			return ctx, err
		}
	}

	ref, err := registry.ImageReferenceInStubRegistry(ctx, imageName)
	if err != nil {
		return ctx, err
	}

	// push to the registry
	err = remote.Write(ref, bundle)
	if err != nil {
		return ctx, err
	}

	return ctx, nil
}

// AttestationFrom finds the raw attestation created by the createAndPushAttestation
func AttestationFrom(ctx context.Context, imageName string) ([]byte, error) {