Class: SlsaBuildPlatform

The system that runs builds and records their provenance: the transitive closure of software, hardware, people and organizations trusted to do so. Provenance names it as the builder.

URI: slsa:SlsaBuildPlatform

 classDiagram
    class SlsaBuildPlatform
    click SlsaBuildPlatform href "../SlsaBuildPlatform/"
      SlsaBuildPlatform : build_level
        
          
    
        
        
        SlsaBuildPlatform --> "0..1" SlsaBuildLevel : build_level
        click SlsaBuildLevel href "../SlsaBuildLevel/"
    

        
      SlsaBuildPlatform : builder_dependencies
        
          
    
        
        
        SlsaBuildPlatform --> "*" InTotoResourceDescriptor : builder_dependencies
        click InTotoResourceDescriptor href "../InTotoResourceDescriptor/"
    

        
      SlsaBuildPlatform : builder_id
        
      SlsaBuildPlatform : component_versions
        
          
    
        
        
        SlsaBuildPlatform --> "*" SlsaComponentVersion : component_versions
        click SlsaComponentVersion href "../SlsaComponentVersion/"
    

        
      SlsaBuildPlatform : hosted
        
      

Slots

Name	Cardinality and Range	Description	Inheritance
component_versions	* SlsaComponentVersion	The version of each named component of a platform	direct
builder_id	1 InTotoTypeUri	The URI that identifies the platform and determines its SLSA Build level	direct
build_level	0..1 SlsaBuildLevel	The highest SLSA Build level the platform’s provenance can meet	direct
hosted	0..1 Boolean	Whether the platform is a hosted service on shared or dedicated infrastructur…	direct
builder_dependencies	* InTotoResourceDescriptor	Dependencies of the platform’s orchestrator that do not run inside the build …	direct

Usages

used by	used in	type	used
SlsaDocument	build_platforms	range	SlsaBuildPlatform
SlsaProducer	build_platform	range	SlsaBuildPlatform
SlsaControlPlane	build_platform	range	SlsaBuildPlatform
SlsaRunDetails	builder	range	SlsaBuildPlatform

In Subsets

• slsa_build_track

Comments

• A platform with several modes of operation at different levels has a different builder_id for each.

See Also

• https://slsa.dev/spec/v1.2/terminology#build-model
• https://slsa.dev/spec/v1.2/build-provenance#builder

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/slsa

Mappings

Mapping Type	Mapped Value
self	slsa:SlsaBuildPlatform
native	slsa:SlsaBuildPlatform

LinkML Source

Direct

name: SlsaBuildPlatform
description: 'The system that runs builds and records their provenance: the transitive
  closure of software, hardware, people and organizations trusted to do so. Provenance
  names it as the builder.'
comments:
- A platform with several modes of operation at different levels has a different builder_id
  for each.
in_subset:
- slsa_build_track
from_schema: https://w3id.org/lmodel/slsa
see_also:
- https://slsa.dev/spec/v1.2/terminology#build-model
- https://slsa.dev/spec/v1.2/build-provenance#builder
slots:
- component_versions
attributes:
  builder_id:
    name: builder_id
    description: The URI that identifies the platform and determines its SLSA Build
      level.
    from_schema: https://w3id.org/lmodel/slsa/slsa_core
    rank: 1000
    identifier: true
    domain_of:
    - SlsaBuildPlatform
    range: in_toto_type_uri
  build_level:
    name: build_level
    description: The highest SLSA Build level the platform's provenance can meet.
    from_schema: https://w3id.org/lmodel/slsa/slsa_core
    rank: 1000
    domain_of:
    - SlsaBuildPlatform
    range: SlsaBuildLevel
  hosted:
    name: hosted
    description: Whether the platform is a hosted service on shared or dedicated infrastructure
      rather than an individual's workstation.
    comments:
    - Build L2 and above require a hosted platform.
    from_schema: https://w3id.org/lmodel/slsa/slsa_core
    rank: 1000
    domain_of:
    - SlsaBuildPlatform
    range: boolean
  builder_dependencies:
    name: builder_dependencies
    description: Dependencies of the platform's orchestrator that do not run inside
      the build but may affect provenance generation or its guarantees.
    from_schema: https://w3id.org/lmodel/slsa/slsa_core
    rank: 1000
    domain_of:
    - SlsaBuildPlatform
    range: InTotoResourceDescriptor
    multivalued: true
    inlined: true
    inlined_as_list: true

Induced

name: SlsaBuildPlatform
description: 'The system that runs builds and records their provenance: the transitive
  closure of software, hardware, people and organizations trusted to do so. Provenance
  names it as the builder.'
comments:
- A platform with several modes of operation at different levels has a different builder_id
  for each.
in_subset:
- slsa_build_track
from_schema: https://w3id.org/lmodel/slsa
see_also:
- https://slsa.dev/spec/v1.2/terminology#build-model
- https://slsa.dev/spec/v1.2/build-provenance#builder
attributes:
  builder_id:
    name: builder_id
    description: The URI that identifies the platform and determines its SLSA Build
      level.
    from_schema: https://w3id.org/lmodel/slsa/slsa_core
    rank: 1000
    identifier: true
    owner: SlsaBuildPlatform
    domain_of:
    - SlsaBuildPlatform
    range: in_toto_type_uri
    required: true
  build_level:
    name: build_level
    description: The highest SLSA Build level the platform's provenance can meet.
    from_schema: https://w3id.org/lmodel/slsa/slsa_core
    rank: 1000
    owner: SlsaBuildPlatform
    domain_of:
    - SlsaBuildPlatform
    range: SlsaBuildLevel
  hosted:
    name: hosted
    description: Whether the platform is a hosted service on shared or dedicated infrastructure
      rather than an individual's workstation.
    comments:
    - Build L2 and above require a hosted platform.
    from_schema: https://w3id.org/lmodel/slsa/slsa_core
    rank: 1000
    owner: SlsaBuildPlatform
    domain_of:
    - SlsaBuildPlatform
    range: boolean
  builder_dependencies:
    name: builder_dependencies
    description: Dependencies of the platform's orchestrator that do not run inside
      the build but may affect provenance generation or its guarantees.
    from_schema: https://w3id.org/lmodel/slsa/slsa_core
    rank: 1000
    owner: SlsaBuildPlatform
    domain_of:
    - SlsaBuildPlatform
    range: InTotoResourceDescriptor
    multivalued: true
    inlined: true
    inlined_as_list: true
  component_versions:
    name: component_versions
    description: The version of each named component of a platform.
    in_subset:
    - slsa_build_track
    from_schema: https://w3id.org/lmodel/slsa
    rank: 1000
    slot_uri: slsa:component_versions
    owner: SlsaBuildPlatform
    domain_of:
    - SlsaVerifier
    - SlsaBuildPlatform
    range: SlsaComponentVersion
    multivalued: true
    inlined: true
    inlined_as_list: true