Skip to content
SLSA

Enum: SlsaResult

A result of evaluating an artifact against SLSA: a track level, a verified property, or a failure. A level implies the levels below it in the same track.

URI: slsa:SlsaResult

Permissible Values

Section titled “Permissible Values”
Value Meaning Description
SLSA_BUILD_LEVEL_UNEVALUATED None The issuer makes no claim about the Build track level
SLSA_BUILD_LEVEL_0 None No Build track guarantees were verified
SLSA_BUILD_LEVEL_1 None Build level 1 was verified
SLSA_BUILD_LEVEL_2 None Build level 2 was verified
SLSA_BUILD_LEVEL_3 None Build level 3 was verified
SLSA_SOURCE_LEVEL_UNEVALUATED None The issuer makes no claim about the Source track level
SLSA_SOURCE_LEVEL_0 None No Source track guarantees were verified
SLSA_SOURCE_LEVEL_1 None Source level 1 was verified
SLSA_SOURCE_LEVEL_2 None Source level 2 was verified
SLSA_SOURCE_LEVEL_3 None Source level 3 was verified
SLSA_SOURCE_LEVEL_4 None Source level 4 was verified
SLSA_SOURCE_TWO_PARTY_REVIEWED None The verified property that two trusted persons reviewed the source, at whatev…
SLSA_BUILD_REPRODUCED None The verified property that two or more independent build platforms reproduced…
FAILED None Policy evaluation failed

In Subsets

Section titled “In Subsets”

Comments

Section titled “Comments”
  • Issuers may add values of their own, but none that start with SLSA_; this enum lists the SLSA-defined values, and slsa_result_value, which verified_levels takes, admits both.
  • The working-draft Dependency and Build Environment tracks name no results yet, so none are listed for them.

See Also

Section titled “See Also”

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

LinkML Source

Section titled “LinkML Source”
name: SlsaResult
description: 'A result of evaluating an artifact against SLSA: a track level, a verified
  property, or a failure. A level implies the levels below it in the same track.'
comments:
- Issuers may add values of their own, but none that start with SLSA_; this enum lists
  the SLSA-defined values, and slsa_result_value, which verified_levels takes, admits
  both.
- The working-draft Dependency and Build Environment tracks name no results yet, so
  none are listed for them.
in_subset:
- slsa_build_track
- slsa_source_track
from_schema: https://w3id.org/lmodel/slsa
see_also:
- https://slsa.dev/spec/v1.2/verification_summary#slsaresult
- https://slsa.dev/spec/v1.2/verified-properties
rank: 1000
permissible_values:
  SLSA_BUILD_LEVEL_UNEVALUATED:
    text: SLSA_BUILD_LEVEL_UNEVALUATED
    description: The issuer makes no claim about the Build track level.
  SLSA_BUILD_LEVEL_0:
    text: SLSA_BUILD_LEVEL_0
    description: No Build track guarantees were verified.
  SLSA_BUILD_LEVEL_1:
    text: SLSA_BUILD_LEVEL_1
    description: Build level 1 was verified.
  SLSA_BUILD_LEVEL_2:
    text: SLSA_BUILD_LEVEL_2
    description: Build level 2 was verified.
  SLSA_BUILD_LEVEL_3:
    text: SLSA_BUILD_LEVEL_3
    description: Build level 3 was verified.
  SLSA_SOURCE_LEVEL_UNEVALUATED:
    text: SLSA_SOURCE_LEVEL_UNEVALUATED
    description: The issuer makes no claim about the Source track level.
  SLSA_SOURCE_LEVEL_0:
    text: SLSA_SOURCE_LEVEL_0
    description: No Source track guarantees were verified.
  SLSA_SOURCE_LEVEL_1:
    text: SLSA_SOURCE_LEVEL_1
    description: Source level 1 was verified.
  SLSA_SOURCE_LEVEL_2:
    text: SLSA_SOURCE_LEVEL_2
    description: Source level 2 was verified.
  SLSA_SOURCE_LEVEL_3:
    text: SLSA_SOURCE_LEVEL_3
    description: Source level 3 was verified.
  SLSA_SOURCE_LEVEL_4:
    text: SLSA_SOURCE_LEVEL_4
    description: Source level 4 was verified.
  SLSA_SOURCE_TWO_PARTY_REVIEWED:
    text: SLSA_SOURCE_TWO_PARTY_REVIEWED
    description: The verified property that two trusted persons reviewed the source,
      at whatever source level.
  SLSA_BUILD_REPRODUCED:
    text: SLSA_BUILD_REPRODUCED
    description: The verified property that two or more independent build platforms
      reproduced the artifact.
  FAILED:
    text: FAILED
    description: Policy evaluation failed.