Class: SlsaBuildEnvironmentAttestation

Evidence of the state of a build environment when a build was dispatched to it: the image it came from and the measurements taken at boot.

URI: slsa:SlsaBuildEnvironmentAttestation

 classDiagram
    class SlsaBuildEnvironmentAttestation
    click SlsaBuildEnvironmentAttestation href "../SlsaBuildEnvironmentAttestation/"
      SlsaPredicate <|-- SlsaBuildEnvironmentAttestation
        click SlsaPredicate href "../SlsaPredicate/"
      
      SlsaBuildEnvironmentAttestation : build_env_level
        
          
    
        
        
        SlsaBuildEnvironmentAttestation --> "0..1" SlsaBuildEnvironmentLevel : build_env_level
        click SlsaBuildEnvironmentLevel href "../SlsaBuildEnvironmentLevel/"
    

        
      SlsaBuildEnvironmentAttestation : build_id
        
      SlsaBuildEnvironmentAttestation : build_image
        
          
    
        
        
        SlsaBuildEnvironmentAttestation --> "0..1" SlsaBuildImage : build_image
        click SlsaBuildImage href "../SlsaBuildImage/"
    

        
      SlsaBuildEnvironmentAttestation : measurements
        
          
    
        
        
        SlsaBuildEnvironmentAttestation --> "*" SlsaMeasurement : measurements
        click SlsaMeasurement href "../SlsaMeasurement/"
    

        
      SlsaBuildEnvironmentAttestation : predicate_kind
        
      

Inheritance

• InTotoPredicate
  • SlsaPredicate
    • SlsaBuildEnvironmentAttestation

Slots

Name	Cardinality and Range	Description	Inheritance
build_env_level	0..1 SlsaBuildEnvironmentLevel	The SLSA Build Environment level this meets	direct
build_id	1 String	The immutable identifier of the build execution the environment was assigned …	direct
build_image	0..1 SlsaBuildImage	The image the environment was instantiated from	direct
measurements	* SlsaMeasurement	The measurements of the environment’s components taken during boot	direct
predicate_kind	0..1 String	The kind of predicate, one of this class’s descendants	InTotoPredicate

In Subsets

• slsa_build_environment_track

Comments

• The track names no single predicate type; platforms issue this evidence in formats such as SCAI or a VSA.

See Also

• https://slsa.dev/spec/draft/build-env-track-basics#buildenv-levels

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/slsa

Mappings

Mapping Type	Mapped Value
self	slsa:SlsaBuildEnvironmentAttestation
native	slsa:SlsaBuildEnvironmentAttestation

LinkML Source

Direct

name: SlsaBuildEnvironmentAttestation
description: 'Evidence of the state of a build environment when a build was dispatched
  to it: the image it came from and the measurements taken at boot.'
comments:
- The track names no single predicate type; platforms issue this evidence in formats
  such as SCAI or a VSA.
in_subset:
- slsa_build_environment_track
from_schema: https://w3id.org/lmodel/slsa
see_also:
- https://slsa.dev/spec/draft/build-env-track-basics#buildenv-levels
is_a: SlsaPredicate
slots:
- build_env_level
attributes:
  build_id:
    name: build_id
    description: The immutable identifier of the build execution the environment was
      assigned to.
    from_schema: https://w3id.org/lmodel/slsa/slsa_build_environment
    rank: 1000
    domain_of:
    - SlsaBuildEnvironmentAttestation
    required: true
  build_image:
    name: build_image
    description: The image the environment was instantiated from.
    from_schema: https://w3id.org/lmodel/slsa/slsa_build_environment
    rank: 1000
    domain_of:
    - SlsaBuildEnvironmentAttestation
    range: SlsaBuildImage
  measurements:
    name: measurements
    description: The measurements of the environment's components taken during boot.
    from_schema: https://w3id.org/lmodel/slsa/slsa_build_environment
    rank: 1000
    domain_of:
    - SlsaBuildEnvironmentAttestation
    range: SlsaMeasurement
    multivalued: true
    inlined: true
    inlined_as_list: true

Induced

name: SlsaBuildEnvironmentAttestation
description: 'Evidence of the state of a build environment when a build was dispatched
  to it: the image it came from and the measurements taken at boot.'
comments:
- The track names no single predicate type; platforms issue this evidence in formats
  such as SCAI or a VSA.
in_subset:
- slsa_build_environment_track
from_schema: https://w3id.org/lmodel/slsa
see_also:
- https://slsa.dev/spec/draft/build-env-track-basics#buildenv-levels
is_a: SlsaPredicate
attributes:
  build_id:
    name: build_id
    description: The immutable identifier of the build execution the environment was
      assigned to.
    from_schema: https://w3id.org/lmodel/slsa/slsa_build_environment
    rank: 1000
    owner: SlsaBuildEnvironmentAttestation
    domain_of:
    - SlsaBuildEnvironmentAttestation
    range: string
    required: true
  build_image:
    name: build_image
    description: The image the environment was instantiated from.
    from_schema: https://w3id.org/lmodel/slsa/slsa_build_environment
    rank: 1000
    owner: SlsaBuildEnvironmentAttestation
    domain_of:
    - SlsaBuildEnvironmentAttestation
    range: SlsaBuildImage
  measurements:
    name: measurements
    description: The measurements of the environment's components taken during boot.
    from_schema: https://w3id.org/lmodel/slsa/slsa_build_environment
    rank: 1000
    owner: SlsaBuildEnvironmentAttestation
    domain_of:
    - SlsaBuildEnvironmentAttestation
    range: SlsaMeasurement
    multivalued: true
    inlined: true
    inlined_as_list: true
  build_env_level:
    name: build_env_level
    description: The SLSA Build Environment level this meets.
    in_subset:
    - slsa_build_environment_track
    from_schema: https://w3id.org/lmodel/slsa
    rank: 1000
    slot_uri: slsa:build_env_level
    owner: SlsaBuildEnvironmentAttestation
    domain_of:
    - SlsaBuildImage
    - SlsaBuildEnvironmentAttestation
    range: SlsaBuildEnvironmentLevel
  predicate_kind:
    name: predicate_kind
    description: The kind of predicate, one of this class's descendants.
    from_schema: https://w3id.org/lmodel/in-toto/in_toto_core
    rank: 1000
    slot_uri: in_toto_linkml:predicate_kind
    designates_type: true
    owner: SlsaBuildEnvironmentAttestation
    domain_of:
    - InTotoPredicate
    range: string