Subset: slsa_dependency_track
Elements of the SLSA Dependency track, a working-draft track for managing risk from third-party dependencies.
Identifier and Mapping Information
Section titled “Identifier and Mapping Information”Schema Source
Section titled “Schema Source”- from schema: https://w3id.org/lmodel/slsa
Classes in subset
Section titled “Classes in subset”| Class | Description |
|---|---|
| SlsaDependencyInventory | The inventory of every third-party build dependency, direct and transitive, o… |
| SlsaPackage | A unit of software distributed under a package name, which is the primary sec… |
| SlsaPackageRegistry | A distribution platform that resolves package names to immutable package arti… |
Slots from SlsaPackage also in slsa_dependency_track
Section titled “Slots from SlsaPackage also in slsa_dependency_track”| Name | Cardinality and Range | Description |
|---|---|---|
| ecosystem | 0..1 String |
The package ecosystem whose rules govern how a package is named and distribut… |
Slots from SlsaPackageRegistry also in slsa_dependency_track
Section titled “Slots from SlsaPackageRegistry also in slsa_dependency_track”| Name | Cardinality and Range | Description |
|---|---|---|
| ecosystem | 0..1 String |
The package ecosystem whose rules govern how a package is named and distribut… |
Slots in subset
Section titled “Slots in subset”| Slot | Description |
|---|---|
| ecosystem | The package ecosystem whose rules govern how a package is named and distribut… |
Enumerations in subset
Section titled “Enumerations in subset”| Enumeration | Description |
|---|---|
| SlsaDependencyLevel | The levels of the SLSA Dependency track, each reducing the risk third-party d… |