privacy-core
Installation
Entrypoint
Types
PrivacyCore

privacy-core

This module has been generated via dagger init and serves as a reference to
basic module structure as you get started with Dagger.

Two functions have been pre-created. You can modify, delete, or add to them,
as needed. They demonstrate usage of arguments and return types using simple
echo and grep commands. The functions can be called from the dagger CLI or
from one of the SDKs.

The first line in this comment block is a short description line and the
rest is a long description with more detail on the module's purpose or usage,
if appropriate. All modules should have a short description.

Installation

dagger install github.com/hseshadr/privacy-core@v0.3.0

Entrypoint

Return Type

PrivacyCore !

Arguments

Name	Type	Default Value	Description
workspace	Workspace	-	A Dagger workspace detected from the current working directory.

Example

dagger -m github.com/hseshadr/privacy-core@de1c0b878c71d9ccabde3bcccf50018f5b700a90 call \

func (m *MyModule) Example() *dagger.PrivacyCore  {
	return dag.
			Privacycore()
}

@function
def example() -> dagger.PrivacyCore:
	return (
		dag.privacy_core()
	)

@func()
example(): PrivacyCore {
	return dag
		.privacyCore()
}

Types

PrivacyCore 🔗

Run the same typed Privacy Core release graph locally and on GitHub.

source() 🔗

Return Type

Directory !

Example

dagger -m github.com/hseshadr/privacy-core@de1c0b878c71d9ccabde3bcccf50018f5b700a90 call \
 source

func (m *MyModule) Example() *dagger.Directory  {
	return dag.
			Privacycore().
			Source()
}

@function
def example() -> dagger.Directory:
	return (
		dag.privacy_core()
		.source()
	)

@func()
example(): Directory {
	return dag
		.privacyCore()
		.source()
}

ci() 🔗

Guard the exact caller source before the canonical product gate.

Return Type

String !

Arguments

Name	Type	Default Value	Description
commitSha	String !	-	No description provided

Example

dagger -m github.com/hseshadr/privacy-core@de1c0b878c71d9ccabde3bcccf50018f5b700a90 call \
 ci --commit-sha string

func (m *MyModule) Example(ctx context.Context, commitSha string) string  {
	return dag.
			Privacycore().
			Ci(ctx, commitSha)
}

@function
async def example(commitsha: str) -> str:
	return await (
		dag.privacy_core()
		.ci(commitsha)
	)

@func()
async example(commitSha: string): Promise<string> {
	return dag
		.privacyCore()
		.ci(commitSha)
}

dependencyAudit() 🔗

Audit the exact frozen pnpm graph without suppressions.

Return Type

Container !

Example

dagger -m github.com/hseshadr/privacy-core@de1c0b878c71d9ccabde3bcccf50018f5b700a90 call \
 dependency-audit

func (m *MyModule) Example() *dagger.Container  {
	return dag.
			Privacycore().
			Dependencyaudit()
}

@function
def example() -> dagger.Container:
	return (
		dag.privacy_core()
		.dependencyaudit()
	)

@func()
example(): Container {
	return dag
		.privacyCore()
		.dependencyAudit()
}

offline() 🔗

Run the real Chromium offline and egress-boundary proof.

Return Type

Container !

Example

dagger -m github.com/hseshadr/privacy-core@de1c0b878c71d9ccabde3bcccf50018f5b700a90 call \
 offline

func (m *MyModule) Example() *dagger.Container  {
	return dag.
			Privacycore().
			Offline()
}

@function
def example() -> dagger.Container:
	return (
		dag.privacy_core()
		.offline()
	)

@func()
example(): Container {
	return dag
		.privacyCore()
		.offline()
}

provenanceProbe() 🔗

Prove the publisher container’s npm detects GitHub Actions and starts provenance.

Return Type

Container !

Example

dagger -m github.com/hseshadr/privacy-core@de1c0b878c71d9ccabde3bcccf50018f5b700a90 call \
 provenance-probe

func (m *MyModule) Example() *dagger.Container  {
	return dag.
			Privacycore().
			Provenanceprobe()
}

@function
def example() -> dagger.Container:
	return (
		dag.privacy_core()
		.provenanceprobe()
	)

@func()
example(): Container {
	return dag
		.privacyCore()
		.provenanceProbe()
}

publish() 🔗

Publish one exact source-free candidate with npm OIDC provenance.

Return Type

String !

Arguments

Name	Type	Default Value	Description
candidate	Directory !	-	A directory.
expectedSha	String !	-	No description provided
oidcUrl	Secret !	-	A reference to a secret value, which can be handled more safely than the value itself.
oidcToken	Secret !	-	A reference to a secret value, which can be handled more safely than the value itself.
githubContext	File !	-	A file.

Example

dagger -m github.com/hseshadr/privacy-core@de1c0b878c71d9ccabde3bcccf50018f5b700a90 call \
 publish --candidate DIR_PATH --expected-sha string --oidc-url env:MYSECRET --oidc-token env:MYSECRET --github-context file:path

func (m *MyModule) Example(ctx context.Context, candidate *dagger.Directory, expectedSha string, oidcUrl *dagger.Secret, oidcToken *dagger.Secret, githubContext *dagger.File) string  {
	return dag.
			Privacycore().
			Publish(ctx, candidate, expectedSha, oidcUrl, oidcToken, githubContext)
}

@function
async def example(candidate: dagger.Directory, expectedsha: str, oidcurl: dagger.Secret, oidctoken: dagger.Secret, githubcontext: dagger.File) -> str:
	return await (
		dag.privacy_core()
		.publish(candidate, expectedsha, oidcurl, oidctoken, githubcontext)
	)

@func()
async example(candidate: Directory, expectedSha: string, oidcUrl: Secret, oidcToken: Secret, githubContext: File): Promise<string> {
	return dag
		.privacyCore()
		.publish(candidate, expectedSha, oidcUrl, oidcToken, githubContext)
}

quality() 🔗

Run lint, strict typing, coverage, browser proof, and build.

Return Type

Container !

Example

dagger -m github.com/hseshadr/privacy-core@de1c0b878c71d9ccabde3bcccf50018f5b700a90 call \
 quality

func (m *MyModule) Example() *dagger.Container  {
	return dag.
			Privacycore().
			Quality()
}

@function
def example() -> dagger.Container:
	return (
		dag.privacy_core()
		.quality()
	)

@func()
example(): Container {
	return dag
		.privacyCore()
		.quality()
}

releaseCandidate() 🔗

Build one exact Dagger-proven npm candidate without publishing.

Return Type

Directory !

Arguments

Name	Type	Default Value	Description
tag	String !	-	No description provided
commitSha	String !	-	No description provided
githubToken	Secret !	-	A reference to a secret value, which can be handled more safely than the value itself.

Example

dagger -m github.com/hseshadr/privacy-core@de1c0b878c71d9ccabde3bcccf50018f5b700a90 call \
 release-candidate --tag string --commit-sha string --github-token env:MYSECRET

func (m *MyModule) Example(tag string, commitSha string, githubToken *dagger.Secret) *dagger.Directory  {
	return dag.
			Privacycore().
			Releasecandidate(tag, commitSha, githubToken)
}

@function
def example(tag: str, commitsha: str, githubtoken: dagger.Secret) -> dagger.Directory:
	return (
		dag.privacy_core()
		.releasecandidate(tag, commitsha, githubtoken)
	)

@func()
example(tag: string, commitSha: string, githubToken: Secret): Directory {
	return dag
		.privacyCore()
		.releaseCandidate(tag, commitSha, githubToken)
}

secretScan() 🔗

Scan the typed snapshot and complete canonical history.

Return Type

Container !

Arguments

Name	Type	Default Value	Description
commitSha	String !	""	No description provided

Example

dagger -m github.com/hseshadr/privacy-core@de1c0b878c71d9ccabde3bcccf50018f5b700a90 call \
 secret-scan --commit-sha string

func (m *MyModule) Example(commitSha string) *dagger.Container  {
	return dag.
			Privacycore().
			Secretscan(commitSha)
}

@function
def example(commitsha: str) -> dagger.Container:
	return (
		dag.privacy_core()
		.secretscan(commitsha)
	)

@func()
example(commitSha: string): Container {
	return dag
		.privacyCore()
		.secretScan(commitSha)
}

workflowSecurity() 🔗

Validate every GitHub ingress workflow with pinned actionlint.

Return Type

Container !

Example

dagger -m github.com/hseshadr/privacy-core@de1c0b878c71d9ccabde3bcccf50018f5b700a90 call \
 workflow-security

func (m *MyModule) Example() *dagger.Container  {
	return dag.
			Privacycore().
			Workflowsecurity()
}

@function
def example() -> dagger.Container:
	return (
		dag.privacy_core()
		.workflowsecurity()
	)

@func()
example(): Container {
	return dag
		.privacyCore()
		.workflowSecurity()
}