Class: InTotoStatementSubject

One artifact an in-toto statement is about: a resource descriptor that carries a digest.

URI: slsa:InTotoStatementSubject

 classDiagram
    class InTotoStatementSubject
    click InTotoStatementSubject href "../InTotoStatementSubject/"
      InTotoResourceDescriptor <|-- InTotoStatementSubject
        click InTotoResourceDescriptor href "../InTotoResourceDescriptor/"
      
      InTotoStatementSubject : annotations
        
          
    
        
        
        InTotoStatementSubject --> "*" InTotoAnnotation : annotations
        click InTotoAnnotation href "../InTotoAnnotation/"
    

        
      InTotoStatementSubject : content
        
      InTotoStatementSubject : digest
        
          
    
        
        
        InTotoStatementSubject --> "1" InTotoDigestSet : digest
        click InTotoDigestSet href "../InTotoDigestSet/"
    

        
      InTotoStatementSubject : download_location
        
      InTotoStatementSubject : media_type
        
      InTotoStatementSubject : resource_name
        
      InTotoStatementSubject : resource_uri
        
      

Inheritance

• InTotoResourceDescriptor
  • InTotoStatementSubject

Slots

Name	Cardinality and Range	Description	Inheritance
resource_uri	0..1 InTotoResourceUri	The URI that identifies a resource, such as a package URL, a git repository a…	InTotoResourceDescriptor
digest	1 InTotoDigestSet	The cryptographic digests of a resource’s content, keyed by algorithm	InTotoResourceDescriptor
resource_name	0..1 String	A name for the resource within the attestation that carries it	InTotoResourceDescriptor
download_location	0..1 InTotoResourceUri	Where the resource can be fetched, when that differs from its identifying URI	InTotoResourceDescriptor
media_type	0..1 String	The IANA media type of the resource’s content	InTotoResourceDescriptor
content	0..1 String	The resource’s content itself, base64-encoded, for a resource small enough to…	InTotoResourceDescriptor
annotations	* InTotoAnnotation	Vendor-specific annotations on the resource, such as the source references a …	InTotoResourceDescriptor

Usages

used by	used in	type	used
SlsaStatement	subject	range	InTotoStatementSubject
InTotoStatement	subject	range	InTotoStatementSubject

See Also

• https://github.com/in-toto/attestation/blob/v1.2.0/spec/v1/statement.md

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/slsa

Mappings

Mapping Type	Mapped Value
self	slsa:InTotoStatementSubject
native	slsa:InTotoStatementSubject

LinkML Source

Direct

name: InTotoStatementSubject
description: 'One artifact an in-toto statement is about: a resource descriptor that
  carries a digest.'
from_schema: https://w3id.org/lmodel/slsa
see_also:
- https://github.com/in-toto/attestation/blob/v1.2.0/spec/v1/statement.md
is_a: InTotoResourceDescriptor
slot_usage:
  digest:
    name: digest
    required: true

Induced

name: InTotoStatementSubject
description: 'One artifact an in-toto statement is about: a resource descriptor that
  carries a digest.'
from_schema: https://w3id.org/lmodel/slsa
see_also:
- https://github.com/in-toto/attestation/blob/v1.2.0/spec/v1/statement.md
is_a: InTotoResourceDescriptor
slot_usage:
  digest:
    name: digest
    required: true
attributes:
  resource_uri:
    name: resource_uri
    description: The URI that identifies a resource, such as a package URL, a git
      repository address or an OCI image reference.
    from_schema: https://w3id.org/lmodel/slsa
    see_also:
    - https://github.com/in-toto/attestation/blob/v1.2.0/spec/v1/field_types.md#resourceuri
    rank: 1000
    slot_uri: in_toto_linkml:resource_uri
    owner: InTotoStatementSubject
    domain_of:
    - SlsaVerificationSummary
    - InTotoResourceDescriptor
    range: in_toto_resource_uri
  digest:
    name: digest
    description: The cryptographic digests of a resource's content, keyed by algorithm.
    from_schema: https://w3id.org/lmodel/slsa
    see_also:
    - https://github.com/in-toto/attestation/blob/v1.2.0/spec/v1/digest_set.md
    rank: 1000
    slot_uri: in_toto_linkml:digest
    owner: InTotoStatementSubject
    domain_of:
    - InTotoResourceDescriptor
    - SlsaMeasurement
    range: InTotoDigestSet
    required: true
    inlined: true
  resource_name:
    name: resource_name
    description: A name for the resource within the attestation that carries it.
    from_schema: https://w3id.org/lmodel/in-toto/in_toto_core
    rank: 1000
    slot_uri: in_toto_linkml:resource_name
    owner: InTotoStatementSubject
    domain_of:
    - InTotoResourceDescriptor
    range: string
  download_location:
    name: download_location
    description: Where the resource can be fetched, when that differs from its identifying
      URI.
    from_schema: https://w3id.org/lmodel/in-toto/in_toto_core
    rank: 1000
    slot_uri: in_toto_linkml:download_location
    owner: InTotoStatementSubject
    domain_of:
    - InTotoResourceDescriptor
    range: in_toto_resource_uri
  media_type:
    name: media_type
    description: The IANA media type of the resource's content.
    from_schema: https://w3id.org/lmodel/in-toto/in_toto_core
    rank: 1000
    slot_uri: dcat:mediaType
    owner: InTotoStatementSubject
    domain_of:
    - InTotoResourceDescriptor
    range: string
  content:
    name: content
    description: The resource's content itself, base64-encoded, for a resource small
      enough to carry inline.
    comments:
    - The in-toto framework asks for content under 1 KB, so that attestations stay
      small.
    from_schema: https://w3id.org/lmodel/in-toto/in_toto_core
    rank: 1000
    slot_uri: in_toto_linkml:content
    owner: InTotoStatementSubject
    domain_of:
    - InTotoResourceDescriptor
    range: string
    pattern: ^[A-Za-z0-9+/_-]+={0,2}$
  annotations:
    name: annotations
    description: Vendor-specific annotations on the resource, such as the source references
      a SLSA Source Verification Summary records.
    from_schema: https://w3id.org/lmodel/in-toto/in_toto_core
    rank: 1000
    slot_uri: in_toto_linkml:annotations
    owner: InTotoStatementSubject
    domain_of:
    - InTotoResourceDescriptor
    range: InTotoAnnotation
    multivalued: true
    inlined: true
    inlined_as_list: true