Changed the issues pointed out and added a way to retrieve attestations by asset version too

Author: patrick.rissmann@l3montree.com

internal/core/attestation/attestation_controller.go

@@ -1,6 +1,9 @@
 package attestation
 
 import (
+	"fmt"
+	"io/ioutil"
+
 	"github.com/l3montree-dev/devguard/internal/core"
 	"github.com/l3montree-dev/devguard/internal/database/models"
 	"github.com/labstack/echo/v4"
@@ -30,10 +33,13 @@ func (a *attestationController) List(ctx core.Context) error {
 
 func (a *attestationController) Create(ctx core.Context) error {
 	var attestation models.Attestation
-	err := ctx.Bind(&attestation)
+
+	content, err := ioutil.ReadAll(ctx.Request().Body)
+
 	if err != nil {
 		return echo.NewHTTPError(400, "unable to bind data to attestation model").WithInternal(err)
 	}
+	fmt.Printf("This is the content as string: %s\n", content)
 
 	err = core.V.Struct(attestation)
 	if err != nil {

internal/core/common_interfaces.go

@@ -54,6 +54,7 @@ type AssetRepository interface {
 
 type AttestationRepository interface {
 	GetByAssetID(assetID uuid.UUID) ([]models.Attestation, error)
+	GetByAssetVersion(assetID uuid.UUID, assetVersion string) ([]models.Attestation, error)
 }
 
 type CveRepository interface {

internal/database/models/asset_version_model.go

@@ -23,7 +23,7 @@ type AssetVersion struct {
 	AssetID uuid.UUID `json:"assetId" gorm:"primarykey;not null;type:uuid;"`
 	Asset   Asset     `json:"asset" gorm:"foreignKey:AssetID;references:ID; constraint:OnDelete:CASCADE;"`
 
-	Attestation     []Attestation         `json:"attestations"  gorm:"foreignKey:AssetVersionName,AssetID;references:Name,AssetID;constraint:OnDelete:CASCADE;"`
+	Attestations    []Attestation         `json:"attestations"  gorm:"foreignKey:AssetVersionName,AssetID;references:Name,AssetID;constraint:OnDelete:CASCADE;"`
 	DefaultBranch   bool                  `json:"defaultBranch" gorm:"default:false;"`
 	Slug            string                `json:"slug" gorm:"type:text;not null;type:text;"`
 	DependencyVulns []DependencyVuln      `json:"dependencyVulns" gorm:"foreignKey:AssetVersionName,AssetID;references:Name,AssetID;constraint:OnDelete:CASCADE;"`

internal/database/models/attestation_model.go

@@ -8,8 +8,6 @@ import (
 	"gorm.io/gorm"
 )
 
-type AttestationType string
-
 type Attestation struct {
 	CreatedAt time.Time      `json:"createdAt"`
 	UpdatedAt time.Time      `json:"updatedAt"`

internal/database/repositories/attestation_repository.go

@@ -32,6 +32,15 @@ func (a *attestationRepository) GetByAssetID(assetID uuid.UUID) ([]models.Attest
 	return attestationList, nil
 }
 
+func (a *attestationRepository) GetByAssetVersion(assetID uuid.UUID, assetVersion string) ([]models.Attestation, error) {
+	var attestationList []models.Attestation
+	err := a.db.Where("asset_id = ? AND asset_version_name = ?", assetID, assetVersion).Find(&attestationList).Error
+	if err != nil {
+		return attestationList, err
+	}
+	return attestationList, nil
+}
+
 func (a *attestationRepository) Create() error {
 	return nil
 }