| additional_digests |
The digests under algorithms this class does not name |
| adoption_metadata |
How the deployment the document describes fares against the adoption study’s … |
| algorithm |
The algorithm’s name, as the key the attestation’s JSON uses, such as svn_rev… |
| annotation_key |
The annotation’s key |
| annotation_values |
The annotation’s values |
| annotations |
Vendor-specific annotations on the resource, such as the source references a … |
| artifact |
The artifact whose dependencies are inventoried |
| attestation_storage_uri |
Where the signed attestation is stored or can be fetched |
| attestations |
The attestations, as in-toto statements with SLSA’s fields |
| authored_at |
When the revision was created |
| authored_by |
The identity of the person or automation that authored the revision |
| blake2b |
The BLAKE2b digest of the artifact, of 32 to 64 bytes |
| blake2s |
The BLAKE2s digest of the artifact, at its full 32 bytes |
| build_definition |
The inputs to the build; required at Build L1 |
| build_env_level |
The SLSA Build Environment level this meets |
| build_id |
The immutable identifier of the build execution the environment was assigned … |
| build_image |
The image the environment was instantiated from |
| build_images |
The build images |
| build_level |
The highest SLSA Build level the platform’s provenance can meet |
| build_metadata |
Metadata about this execution of the build |
| build_platform |
The build platform this party or component belongs to or uses |
| build_platforms |
The build platforms |
| build_type |
The URI of the template that says how to run the build and read its parameter… |
| builder |
The build platform that ran the build and is trusted to have written this pro… |
| builder_dependencies |
Dependencies of the platform’s orchestrator that do not run inside the build … |
| builder_id |
The URI that identifies the platform and determines its SLSA Build level |
| byproducts |
Artifacts the build produced beside its outputs that may help debugging or in… |
| challenges |
The challenge themes that apply |
| component |
The component’s name |
| component_version |
The component’s version string |
| component_versions |
The version of each named component of a platform |
| content |
The resource’s content itself, base64-encoded, for a resource small enough to… |
| control_planes |
The control planes of the build platforms |
| controls_enforced |
The technical controls the SCS enforced when the revision was created, as the… |
| dependencies |
The dependencies, each as a resource descriptor |
| dependency_count |
How many dependencies were verified at that level |
| dependency_inventories |
The dependency inventories |
| dependency_level |
The SLSA Dependency level the producer’s process meets for this artifact |
| dependency_levels |
How many transitive dependencies were verified at each level; absent when the… |
| digest |
The cryptographic digests of a resource’s content, keyed by algorithm |
| dir_hash |
A digest over a directory’s content by the dirhash Hash1 function, in lowerca… |
| download_location |
Where the resource can be fetched, when that differs from its identifying URI |
| ecosystem |
The package ecosystem whose rules govern how a package is named and distribut… |
| external_parameters |
The inputs under the tenant’s control; required at Build L1, complete at Buil… |
| finished_on |
When the build finished |
| git_blob |
The git blob id of a file’s content |
| git_commit |
The git commit id of a source revision |
| git_tag |
The git object id of an annotated tag |
| git_tree |
The git tree id of a source revision’s content, or of any file tree |
| gost |
The GOST R 34 |
| guac_uri |
Where a GUAC instance answers queries about the package’s dependency and prov… |
| hermetic |
Whether the build could reach only the dependencies it declared, with no othe… |
| hosted |
Whether the platform is a hosted service on shared or dedicated infrastructur… |
| hosted_by |
The source control system that hosts the repository |
| image_uri |
The URI that identifies the image version, such as an OCI reference with its … |
| input_attestations |
Every attestation the verifier consulted, each with a digest; complete when p… |
| internal_parameters |
The inputs the platform sets itself; kept for debugging, incident response an… |
| invocation_id |
An identifier for this build invocation, in a format the builder defines; use… |
| md5 |
The MD5 digest of the artifact |
| measured_component |
The component or state that was measured, such as the bootloader, guest kerne… |
| measurements |
The measurements of the environment’s components taken during boot |
| media_type |
The IANA media type of the resource’s content |
| named_references |
The branches and tags |
| organization_properties |
Properties the organization defines for the revision, each prefixed ORG_SOURC… |
| package_artifacts |
The immutable artifacts the package name has resolved to |
| package_name |
The name consumers use to obtain the package within its ecosystem and registr… |
| package_registries |
The package registries |
| packages |
The packages |
| parameter_name |
The parameter’s name |
| parameter_value |
The parameter’s value |
| parent_revisions |
The revisions this one descends from, which together form the change history |
| parties |
The parties, each in its role |
| party_name |
The party’s name |
| party_type |
The role the party acts in, one of this class’s descendants |
| pipeline_orchestrator |
The CI/CD system that coordinated the build, named by URI, where it differs f… |
| policy |
The policy the subject was verified against, by URI and preferably by digest … |
| predicate |
The predicate, one of the kinds this schema or an importing one models; predi… |
| predicate_kind |
The kind of predicate, one of this class’s descendants |
| predicate_type |
The URI that names the predicate’s type and so its schema, such as https://in… |
| produced_by |
The party that created and distributes the image |
| protected |
Whether the organization has the SCS enforce its technical controls on this r… |
| provenance |
The build provenance of the image itself, required at Build Environment L1 |
| provenance_generation_tool |
The tool that generated this provenance, named by URI |
| reference_name |
The reference’s name, fully qualified in git, such as refs/heads/main |
| reference_type |
The kind of named reference, one of this class’s descendants |
| registry |
The registry the package is published to |
| registry_uri |
The URI that identifies the registry |
| repository |
The source repository this belongs to |
| repository_uri |
The stable locator the SCS gives the repository |
| resolved_dependencies |
The artifacts fetched during the build, as far as the platform knows them; co… |
| resource_name |
A name for the resource within the attestation that carries it |
| resource_uri |
The URI that identifies a resource, such as a package URL, a git repository a… |
| review_type |
The form of review that approved the revision |
| revision |
The source revision this refers to |
| revision_id |
The revision identifier the SCS assigns, such as a git commit id or a path- q… |
| ripemd160 |
The RIPEMD-160 digest of the artifact |
| run_details |
What is specific to this execution of the build; required at Build L1 |
| scs_uri |
The URI that identifies the source control system |
| security_insights_uri |
The SECURITY-INSIGHTS |
| sha1 |
The SHA-1 digest of the artifact |
| sha224 |
The SHA-224 digest of the artifact |
| sha256 |
The SHA-256 digest of the artifact |
| sha384 |
The SHA-384 digest of the artifact |
| sha3_224 |
The SHA3-224 digest of the artifact |
| sha3_256 |
The SHA3-256 digest of the artifact |
| sha3_384 |
The SHA3-384 digest of the artifact |
| sha3_512 |
The SHA3-512 digest of the artifact |
| sha512 |
The SHA-512 digest of the artifact |
| sha512_224 |
The SHA-512/224 digest of the artifact |
| sha512_256 |
The SHA-512/256 digest of the artifact |
| shake128 |
The SHAKE128 digest of the artifact, of at least 32 bytes |
| shake256 |
The SHAKE256 digest of the artifact, of at least 32 bytes |
| signing_tool |
The tool that signed the attestation, named by URI, such as Cosign or Notatio… |
| slsa_version |
The SLSA specification version the verifier applied, as MAJOR |
| sm3 |
The SM3 digest of the artifact |
| source_control_systems |
The source control systems |
| source_level |
The SLSA Source level the SCS asserts for the revision |
| source_repositories |
The source repositories |
| source_revisions |
The source revisions |
| started_on |
When the build started |
| statement_type |
The in-toto statement type, always https://in-toto |
| strategies |
The strategy themes applied or recommended |
| subject |
The artifacts the predicate is about, each with a digest |
| time_verified |
When the verification happened |
| transparency_log_entry |
The transparency log entry that records the signature, such as a Rekor entry |
| value |
The digest under that algorithm, in the encoding the algorithm documents |
| verification_result |
Whether the subject passed the policy |
| verified_level |
The level the dependencies were verified at, or a result of the issuer’s own |
| verified_levels |
The highest level verified in each track, any verified property, and any resu… |
| verifier |
The verifier that made this determination |
| verifier_id |
The URI that identifies the verifier |
