Method setExpiration

internal/tracker/tracker.go:305–321

setExpiration sets the expires_on attribute on records using a duration-based approach. Each record expires after a configurable duration based on inEffectDays from when it's added. The most recent record (index 0) gets no expiration date, making it the current active record.

(inEffectDays int)

// Each record expires after a configurable duration based on inEffectDays from when it's added.
// The most recent record (index 0) gets no expiration date, making it the current active record.
func (t *Tracker) setExpiration(inEffectDays int) {
	expirationDuration := time.Duration(inEffectDays) * oneDay // Use --in-effect-days flag value
	now := time.Now().UTC().Round(oneDay)

	for _, records := range t.TrustedTasks {
		for i := range records {
			if i == 0 {
				// Most recent record doesn't expire
				records[i].ExpiresOn = nil
			} else if records[i].ExpiresOn == nil {
				// Add expires_on to any record that doesn't have one already
				expiresOn := now.Add(expirationDuration)
				records[i].ExpiresOn = &expiresOn
			}
		}
	}
}

// ociRefFromGroup returns the OCI image reference from the given group, e.g.
// oci://registry.local/spam:latest -> registry.local/spam:latest