Function UploadVSAEnvelope

internal/validate/vsa/storage.go:144–191

UploadVSAEnvelope uploads a VSA envelope to the configured storage backends

(ctx context.Context, envelopePath string, storageConfigs []string, signer *Signer)

// UploadVSAEnvelope uploads a VSA envelope to the configured storage backends
func UploadVSAEnvelope(ctx context.Context, envelopePath string, storageConfigs []string, signer *Signer) error {
	if len(storageConfigs) == 0 {
		log.Infof("[VSA] No storage backends configured, skipping upload")
		return nil
	}

	// Read envelope content
	envelopeContent, err := os.ReadFile(envelopePath)
	if err != nil {
		return fmt.Errorf("failed to read VSA envelope from %s: %w", envelopePath, err)
	}

	// Upload to each configured backend
	for _, storageFlag := range storageConfigs {
		config, err := ParseStorageFlag(storageFlag)
		if err != nil {
			log.Warnf("invalid storage config '%s': %v", storageFlag, err)
			continue
		}

		backend, err := CreateStorageBackend(config)
		if err != nil {
			log.Warnf("failed to create %s backend: %v", config.Backend, err)
			continue
		}

		// Upload using the appropriate method
		var uploadErr error
		if signerAwareUploader, ok := backend.(SignerAwareUploader); ok && signer != nil {
			payloadHash, uploadErr := signerAwareUploader.UploadWithSigner(ctx, envelopeContent, signer)
			if uploadErr == nil && payloadHash != "" {
				log.WithFields(log.Fields{
					"backend":      backend.Name(),
					"payload_hash": payloadHash,
				}).Debug("[VSA] Upload successful, payload hash available for retrieval")
			}
		} else {
			uploadErr = backend.Upload(ctx, envelopeContent)
		}

		if uploadErr != nil {
			log.Warnf("failed to upload to %s: %v", backend.Name(), uploadErr)
			continue
		}
	}

	return nil
}