Skip to content
SLSA

Slot: hermetic

Whether the build could reach only the dependencies it declared, with no other network or filesystem access.

URI: slsa:hermetic

Applicable Classes

Section titled “Applicable Classes”
Name Description Modifies Slot
SlsaBuildDefinition The inputs to a build, in enough detail to initialize it and begin execution;… no

Properties

Section titled “Properties”

Type and Range

Section titled “Type and Range”
Property Value
Range Boolean
Domain Of SlsaBuildDefinition

Slot Characteristics

Section titled “Slot Characteristics”
Property Value
Owner SlsaBuildDefinition

In Subsets

Section titled “In Subsets”

Comments

Section titled “Comments”
  • SLSA v1.2 does not require hermetic builds; Build L3’s isolation is a different property, and hermeticity is a candidate for a future Build L4.
  • The study cites a 2023 industry survey in which over half the participants found hermetic builds hard to implement, and lists “hermetic build” among SLSA’s unclear terms (Tamanna et al., 2024, UC.1).

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self slsa:hermetic
native slsa:hermetic

LinkML Source

Section titled “LinkML Source”
name: hermetic
description: Whether the build could reach only the dependencies it declared, with
  no other network or filesystem access.
comments:
- SLSA v1.2 does not require hermetic builds; Build L3's isolation is a different
  property, and hermeticity is a candidate for a future Build L4.
- The study cites a 2023 industry survey in which over half the participants found
  hermetic builds hard to implement, and lists "hermetic build" among SLSA's unclear
  terms (Tamanna et al., 2024, UC.1).
in_subset:
- slsa_adoption_study
from_schema: https://w3id.org/lmodel/slsa
rank: 1000
owner: SlsaBuildDefinition
domain_of:
- SlsaBuildDefinition
range: boolean