CreateAttestations creates the SLSA attestations associated with a rebuild.

SummarizeArtifacts fetches and summarizes the rebuild and upstream artifacts.

ArtifactEquivalenceBuildType is the SLSA build type used for artifact equivalence attestations.

RebuildBuildType is the SLSA build type used for rebuild attestations.

ArtifactSummary is a summary of an artifact for the purposes of verification.

Attestor is a verifier that signs and publishes attestation bundles.

InTotoEnvelopeSigner is a wrapper around dsse.EnvelopeSigner that implements a higher-level signing operation for In Toto resources.