Subset: slsa_build_track
Elements of the SLSA Build track, which measures the trustworthiness of a build and its provenance.
URI: slsa_build_track
Identifier and Mapping Information
Section titled “Identifier and Mapping Information”Schema Source
Section titled “Schema Source”- from schema: https://w3id.org/lmodel/slsa
Classes in subset
Section titled “Classes in subset”| Class | Description |
|---|---|
| SlsaBuildDefinition | The inputs to a build, in enough detail to initialize it and begin execution;… |
| SlsaBuildMetadata | Metadata about one execution of a build: its identifier and when it started a… |
| SlsaBuildParameter | One named input to a build, with a string value |
| SlsaBuildPlatform | The system that runs builds and records their provenance: the transitive clos… |
| SlsaBuildProvenance | The predicate that says how a build platform produced a set of artifacts, so … |
| SlsaComponentVersion | The version of one named component of a platform |
| SlsaConsumer | A party that uses software a producer provides, verifying its provenance itse… |
| SlsaControlPlane | The component of a build platform that orchestrates each build and generates … |
| SlsaDependencyLevelCount | The number of an artifact’s transitive dependencies verified at one level, ea… |
| SlsaInfrastructureProvider | A party that provides software or services to the other roles, such as a pack… |
| SlsaPackage | A unit of software distributed under a package name, which is the primary sec… |
| SlsaPackageRegistry | A distribution platform that resolves package names to immutable package arti… |
| SlsaParty | A person or organization that takes part in a software supply chain, in one o… |
| SlsaPredicate | The base of every predicate this schema models; the predicate_kind it takes f… |
| SlsaProducer | A party that creates software and provides it to others, choosing a build pla… |
| SlsaRunDetails | What is specific to one execution of a build: the platform that ran it, metad… |
| SlsaStatement | An in-toto statement with the fields this schema adds: where the signed attes… |
| SlsaVerificationSummary | The predicate in which a verifier records that it evaluated artifacts against… |
| SlsaVerificationSummaryInputAttestation | One attestation a verifier consulted: a resource descriptor that carries the … |
| SlsaVerificationSummaryPolicy | The policy a verification summary applied: a resource descriptor that names t… |
| SlsaVerifier | A party that inspects provenance or other attestations and decides whether an… |
Slots from SlsaBuildPlatform also in slsa_build_track
Section titled “Slots from SlsaBuildPlatform also in slsa_build_track”| Name | Cardinality and Range | Description |
|---|---|---|
| component_versions | * SlsaComponentVersion |
The version of each named component of a platform |
Slots from SlsaControlPlane also in slsa_build_track
Section titled “Slots from SlsaControlPlane also in slsa_build_track”| Name | Cardinality and Range | Description |
|---|---|---|
| build_platform | 0..1 SlsaBuildPlatform |
The build platform this party or component belongs to or uses |
Slots from SlsaPackage also in slsa_build_track
Section titled “Slots from SlsaPackage also in slsa_build_track”| Name | Cardinality and Range | Description |
|---|---|---|
| ecosystem | 0..1 String |
The package ecosystem whose rules govern how a package is named and distribut… |
Slots from SlsaPackageRegistry also in slsa_build_track
Section titled “Slots from SlsaPackageRegistry also in slsa_build_track”| Name | Cardinality and Range | Description |
|---|---|---|
| ecosystem | 0..1 String |
The package ecosystem whose rules govern how a package is named and distribut… |
Slots from SlsaProducer also in slsa_build_track
Section titled “Slots from SlsaProducer also in slsa_build_track”| Name | Cardinality and Range | Description |
|---|---|---|
| build_platform | 0..1 SlsaBuildPlatform |
The build platform this party or component belongs to or uses |
Slots from SlsaVerifier also in slsa_build_track
Section titled “Slots from SlsaVerifier also in slsa_build_track”| Name | Cardinality and Range | Description |
|---|---|---|
| component_versions | * SlsaComponentVersion |
The version of each named component of a platform |
Slots in subset
Section titled “Slots in subset”| Slot | Description |
|---|---|
| build_platform | The build platform this party or component belongs to or uses |
| component_versions | The version of each named component of a platform |
| ecosystem | The package ecosystem whose rules govern how a package is named and distribut… |
Enumerations in subset
Section titled “Enumerations in subset”| Enumeration | Description |
|---|---|
| SlsaBuildLevel | The levels of the SLSA Build track, each adding protection against tampering … |
| SlsaResult | A result of evaluating an artifact against SLSA: a track level, a verified pr… |
| SlsaVerificationResult | The outcome of verifying an artifact against a policy |