Googleapis Binaryauthorization

Google Binary Authorization is a deployment security service that enforces trusted container image policies.

• Base URL: https://binaryauthorization.googleapis.com
• Auth: OAuth 2.0 (user-delegated) — attach an InTouch oauth credential. Mint one with itcli.py /oauth <provider> (device-code) or /google-auth (Google); the server auto-refreshes the access token before each run, so the connector never handles or stores tokens.

Operations

• binaryauthorization_systempolicy_getpolicy — GET /v1beta1/{name} — Gets the current system policy in the specified location.
• binaryauthorization_projects_attestors_list — GET /v1beta1/{parent}/attestors — Lists attestors. Returns INVALID_ARGUMENT if the project does not exist.
• binaryauthorization_projects_policy_getiampolicy — GET /v1beta1/{resource}:getIamPolicy — Gets the access control policy for a resource. Returns an empty policy if the re
• binaryauthorization_projects_attestors_validatea — POST /v1beta1/{attestor}:validateAttestationOccurrence — Returns whether the given Attestation for the given image URI was signed by the
• binaryauthorization_projects_attestors_update — PUT /v1beta1/{name} — Updates an attestor. Returns NOT_FOUND if the attestor does not exist.
• binaryauthorization_projects_attestors_delete — DELETE /v1beta1/{name} — Deletes an attestor. Returns NOT_FOUND if the attestor does not exist.

Inputs

• a linked oauth credential (no key inputs) — the server injects a fresh Authorization: Bearer from it
• operation — one of the operations above
• path parameters when an operation's path contains {...}
• query — optional JSON object of query params
• body — JSON object for create/update ops

Example

operation: binaryauthorization_systempolicy_getpolicy
# (attach an 'oauth' credential to the task — no inline secrets)

Publishes

The keys a later task may reference as {{taskName.key}}. Referencing anything not listed here resolves to nothing at run time.

• error
• operation
• result
• status

Input Properties

Every property this tool accepts, from its own tool.iml.