Skip to content
SLSA

Class: SlsaSourceProvenance

Evidence from an SCS of how a revision came to exist and which technical controls were enforced when it did.

URI: slsa:SlsaSourceProvenance

 classDiagram
    class SlsaSourceProvenance
    click SlsaSourceProvenance href "../SlsaSourceProvenance/"
      SlsaPredicate <|-- SlsaSourceProvenance
        click SlsaPredicate href "../SlsaPredicate/"
      
      SlsaSourceProvenance : controls_enforced
        
      SlsaSourceProvenance : predicate_kind
        
      SlsaSourceProvenance : revision
        
          
    
        
        
        SlsaSourceProvenance --> "1" SlsaSourceRevision : revision
        click SlsaSourceRevision href "../SlsaSourceRevision/"

Inheritance

Section titled “Inheritance”

Slots

Section titled “Slots”
Name Cardinality and Range Description Inheritance
revision 1
SlsaSourceRevision		 The source revision this refers to direct
controls_enforced *
String		 The technical controls the SCS enforced when the revision was created, as the… direct
predicate_kind 0..1
String		 The kind of predicate, one of this class’s descendants InTotoPredicate

In Subsets

Section titled “In Subsets”

Comments

Section titled “Comments”
  • SLSA leaves the format of source provenance to each SCS and defines no predicate type for it; this class holds what the specification says such provenance conveys.
  • Source L2 and above require the SCS to issue it with each new revision.

See Also

Section titled “See Also”

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self slsa:SlsaSourceProvenance
native slsa:SlsaSourceProvenance

LinkML Source

Section titled “LinkML Source”

Direct

Section titled “Direct”
name: SlsaSourceProvenance
description: Evidence from an SCS of how a revision came to exist and which technical
  controls were enforced when it did.
comments:
- SLSA leaves the format of source provenance to each SCS and defines no predicate
  type for it; this class holds what the specification says such provenance conveys.
- Source L2 and above require the SCS to issue it with each new revision.
in_subset:
- slsa_source_track
from_schema: https://w3id.org/lmodel/slsa
see_also:
- https://slsa.dev/spec/v1.2/source-requirements#source-provenance-attestations
is_a: SlsaPredicate
slots:
- revision
slot_usage:
  revision:
    name: revision
    required: true
attributes:
  controls_enforced:
    name: controls_enforced
    description: The technical controls the SCS enforced when the revision was created,
      as the organization documents them.
    comments:
    - Two-party review is a control many single-maintainer projects cannot meet (Tamanna
      et al., 2024, LF.2).
    from_schema: https://w3id.org/lmodel/slsa/slsa_source
    rank: 1000
    domain_of:
    - SlsaSourceProvenance
    multivalued: true

Induced

Section titled “Induced”
name: SlsaSourceProvenance
description: Evidence from an SCS of how a revision came to exist and which technical
  controls were enforced when it did.
comments:
- SLSA leaves the format of source provenance to each SCS and defines no predicate
  type for it; this class holds what the specification says such provenance conveys.
- Source L2 and above require the SCS to issue it with each new revision.
in_subset:
- slsa_source_track
from_schema: https://w3id.org/lmodel/slsa
see_also:
- https://slsa.dev/spec/v1.2/source-requirements#source-provenance-attestations
is_a: SlsaPredicate
slot_usage:
  revision:
    name: revision
    required: true
attributes:
  controls_enforced:
    name: controls_enforced
    description: The technical controls the SCS enforced when the revision was created,
      as the organization documents them.
    comments:
    - Two-party review is a control many single-maintainer projects cannot meet (Tamanna
      et al., 2024, LF.2).
    from_schema: https://w3id.org/lmodel/slsa/slsa_source
    rank: 1000
    owner: SlsaSourceProvenance
    domain_of:
    - SlsaSourceProvenance
    range: string
    multivalued: true
  revision:
    name: revision
    description: The source revision this refers to.
    in_subset:
    - slsa_source_track
    from_schema: https://w3id.org/lmodel/slsa
    rank: 1000
    slot_uri: slsa:revision
    owner: SlsaSourceProvenance
    domain_of:
    - SlsaNamedReference
    - SlsaSourceProvenance
    range: SlsaSourceRevision
    required: true
  predicate_kind:
    name: predicate_kind
    description: The kind of predicate, one of this class's descendants.
    from_schema: https://w3id.org/lmodel/in-toto/in_toto_core
    rank: 1000
    slot_uri: in_toto_linkml:predicate_kind
    designates_type: true
    owner: SlsaSourceProvenance
    domain_of:
    - InTotoPredicate
    range: string