Skip to main content
Version: Next

Schema Validator

This document outlines how Ratify can be used to verify the schema of any reference artifact. The schemavalidator verifier is added as a plugin to the Ratify verification framework. Currently the schema validator verifier supports JSON schema validation.

Configuration

K8s

apiVersion: config.ratify.deislabs.io/v1beta1
kind: Verifier
metadata:
name: verifier-schemavalidator
spec:
name: schemavalidator
artifactTypes: vnd.aquasecurity.trivy.report.sarif.v1
parameters:
schemas:
application/sarif+json: https://json.schemastore.org/sarif-2.1.0-rtm.5.json
NameRequiredDescriptionDefault Value
schemasyesA mapping between the schema name to the schema path. The path can be either a URL or a canonical file path that starts with file://""

JSON config

 "plugins": [
{
"name": "schemavalidator",
"artifactTypes": "application/vnd.aquasecurity.trivy.report.sarif.v1",
"schemas": {
"application/sarif+json": "https://json.schemastore.org/sarif-2.1.0-rtm.5.json"
}
}
]