Skip to content
SLSA

Slot: algorithm

The algorithm’s name, as the key the attestation’s JSON uses, such as svn_revision_id.

URI: spdx:algorithm

Applicable Classes

Section titled “Applicable Classes”
Name Description Modifies Slot
InTotoAdditionalDigest One digest under an algorithm that InTotoDigestSet does not name, such as an … no

Properties

Section titled “Properties”

Type and Range

Section titled “Type and Range”
Property Value
Range String
Domain Of InTotoAdditionalDigest
Slot URI spdx:algorithm

Cardinality and Requirements

Section titled “Cardinality and Requirements”
Property Value
Required Yes

Slot Characteristics

Section titled “Slot Characteristics”
Property Value
Owner InTotoAdditionalDigest

Value Constraints

Section titled “Value Constraints”
Property Value
Regex Pattern ^[a-z][A-Za-z0-9_.:-]*$
Expressions & Logic

None Of

Section titled “None Of”

Value must not satisfy any of:

  • AnonymousSlotExpression({ ‘equals_string_in’: [‘sha256’, ‘sha224’, ‘sha384’, ‘sha512’, ‘sha512_224’, ‘sha512_256’, ‘sha3_224’, ‘sha3_256’, ‘sha3_384’, ‘sha3_512’, ‘shake128’, ‘shake256’, ‘blake2b’, ‘blake2s’, ‘ripemd160’, ‘sm3’, ‘gost’, ‘sha1’, ‘md5’, ‘dirHash’, ‘gitCommit’, ‘gitTree’, ‘gitBlob’, ‘gitTag’, ‘dir_hash’, ‘git_commit’, ‘git_tree’, ‘git_blob’, ‘git_tag’] })

Comments

Section titled “Comments”
  • An algorithm that InTotoDigestSet names, by its JSON key or by its field name, goes in that field instead.
  • A name starts with a lowercase letter, as the framework’s own names do, so that SHA256 is not taken for sha256, and it may hold a colon, as go-witness’s gitoid:sha256 does. The framework itself sets no rule for other names.

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self spdx:algorithm
native slsa:algorithm

LinkML Source

Section titled “LinkML Source”
name: algorithm
description: The algorithm's name, as the key the attestation's JSON uses, such as
  svn_revision_id.
comments:
- An algorithm that InTotoDigestSet names, by its JSON key or by its field name, goes
  in that field instead.
- A name starts with a lowercase letter, as the framework's own names do, so that
  SHA256 is not taken for sha256, and it may hold a colon, as go-witness's gitoid:sha256
  does. The framework itself sets no rule for other names.
from_schema: https://w3id.org/lmodel/slsa
rank: 1000
slot_uri: spdx:algorithm
owner: InTotoAdditionalDigest
domain_of:
- InTotoAdditionalDigest
range: string
required: true
pattern: ^[a-z][A-Za-z0-9_.:-]*$
none_of:
- equals_string_in:
  - sha256
  - sha224
  - sha384
  - sha512
  - sha512_224
  - sha512_256
  - sha3_224
  - sha3_256
  - sha3_384
  - sha3_512
  - shake128
  - shake256
  - blake2b
  - blake2s
  - ripemd160
  - sm3
  - gost
  - sha1
  - md5
  - dirHash
  - gitCommit
  - gitTree
  - gitBlob
  - gitTag
  - dir_hash
  - git_commit
  - git_tree
  - git_blob
  - git_tag