Class: InTotoAdditionalDigest

One digest under an algorithm that InTotoDigestSet does not name, such as an SCS’s own revision type.

URI: slsa:InTotoAdditionalDigest

 classDiagram
    class InTotoAdditionalDigest
    click InTotoAdditionalDigest href "../InTotoAdditionalDigest/"
      InTotoAdditionalDigest : algorithm
        
      InTotoAdditionalDigest : value
        
      

Slots

Name	Cardinality and Range	Description	Inheritance
algorithm	1 String	The algorithm’s name, as the key the attestation’s JSON uses, such as svn_rev…	direct
value	1 String	The digest under that algorithm, in the encoding the algorithm documents	direct

Usages

used by	used in	type	used
InTotoDigestSet	additional_digests	range	InTotoAdditionalDigest

Comments

• In the attestation’s JSON the algorithm is a key of the digest set beside the named ones, and an algorithm the framework does not define documents how its value is encoded.
• An SCS that does not use cryptographic digests defines a canonical revision type of its own that includes the repository, such as svn_revision_id.
• Each algorithm appears once in a list, since the attestation’s JSON uses it as a key; the validator does not check this.

See Also

• https://github.com/in-toto/attestation/blob/v1.2.0/spec/v1/digest_set.md

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/slsa

Mappings

Mapping Type	Mapped Value
self	slsa:InTotoAdditionalDigest
native	slsa:InTotoAdditionalDigest

LinkML Source

Direct

name: InTotoAdditionalDigest
description: One digest under an algorithm that InTotoDigestSet does not name, such
  as an SCS's own revision type.
comments:
- In the attestation's JSON the algorithm is a key of the digest set beside the named
  ones, and an algorithm the framework does not define documents how its value is
  encoded.
- An SCS that does not use cryptographic digests defines a canonical revision type
  of its own that includes the repository, such as svn_revision_id.
- Each algorithm appears once in a list, since the attestation's JSON uses it as a
  key; the validator does not check this.
from_schema: https://w3id.org/lmodel/slsa
see_also:
- https://github.com/in-toto/attestation/blob/v1.2.0/spec/v1/digest_set.md
attributes:
  algorithm:
    name: algorithm
    description: The algorithm's name, as the key the attestation's JSON uses, such
      as svn_revision_id.
    comments:
    - An algorithm that InTotoDigestSet names, by its JSON key or by its field name,
      goes in that field instead.
    - A name starts with a lowercase letter, as the framework's own names do, so that
      SHA256 is not taken for sha256, and it may hold a colon, as go-witness's gitoid:sha256
      does. The framework itself sets no rule for other names.
    from_schema: https://w3id.org/lmodel/in-toto/in_toto_core
    rank: 1000
    slot_uri: spdx:algorithm
    domain_of:
    - InTotoAdditionalDigest
    required: true
    pattern: ^[a-z][A-Za-z0-9_.:-]*$
    none_of:
    - equals_string_in:
      - sha256
      - sha224
      - sha384
      - sha512
      - sha512_224
      - sha512_256
      - sha3_224
      - sha3_256
      - sha3_384
      - sha3_512
      - shake128
      - shake256
      - blake2b
      - blake2s
      - ripemd160
      - sm3
      - gost
      - sha1
      - md5
      - dirHash
      - gitCommit
      - gitTree
      - gitBlob
      - gitTag
      - dir_hash
      - git_commit
      - git_tree
      - git_blob
      - git_tag
  value:
    name: value
    description: The digest under that algorithm, in the encoding the algorithm documents.
    from_schema: https://w3id.org/lmodel/in-toto/in_toto_core
    rank: 1000
    slot_uri: in_toto_linkml:value
    domain_of:
    - InTotoAdditionalDigest
    required: true
    pattern: ^\S+$

Induced

name: InTotoAdditionalDigest
description: One digest under an algorithm that InTotoDigestSet does not name, such
  as an SCS's own revision type.
comments:
- In the attestation's JSON the algorithm is a key of the digest set beside the named
  ones, and an algorithm the framework does not define documents how its value is
  encoded.
- An SCS that does not use cryptographic digests defines a canonical revision type
  of its own that includes the repository, such as svn_revision_id.
- Each algorithm appears once in a list, since the attestation's JSON uses it as a
  key; the validator does not check this.
from_schema: https://w3id.org/lmodel/slsa
see_also:
- https://github.com/in-toto/attestation/blob/v1.2.0/spec/v1/digest_set.md
attributes:
  algorithm:
    name: algorithm
    description: The algorithm's name, as the key the attestation's JSON uses, such
      as svn_revision_id.
    comments:
    - An algorithm that InTotoDigestSet names, by its JSON key or by its field name,
      goes in that field instead.
    - A name starts with a lowercase letter, as the framework's own names do, so that
      SHA256 is not taken for sha256, and it may hold a colon, as go-witness's gitoid:sha256
      does. The framework itself sets no rule for other names.
    from_schema: https://w3id.org/lmodel/in-toto/in_toto_core
    rank: 1000
    slot_uri: spdx:algorithm
    owner: InTotoAdditionalDigest
    domain_of:
    - InTotoAdditionalDigest
    range: string
    required: true
    pattern: ^[a-z][A-Za-z0-9_.:-]*$
    none_of:
    - equals_string_in:
      - sha256
      - sha224
      - sha384
      - sha512
      - sha512_224
      - sha512_256
      - sha3_224
      - sha3_256
      - sha3_384
      - sha3_512
      - shake128
      - shake256
      - blake2b
      - blake2s
      - ripemd160
      - sm3
      - gost
      - sha1
      - md5
      - dirHash
      - gitCommit
      - gitTree
      - gitBlob
      - gitTag
      - dir_hash
      - git_commit
      - git_tree
      - git_blob
      - git_tag
  value:
    name: value
    description: The digest under that algorithm, in the encoding the algorithm documents.
    from_schema: https://w3id.org/lmodel/in-toto/in_toto_core
    rank: 1000
    slot_uri: in_toto_linkml:value
    owner: InTotoAdditionalDigest
    domain_of:
    - InTotoAdditionalDigest
    range: string
    required: true
    pattern: ^\S+$