Subset: slsa_source_track
Elements of the SLSA Source track, which measures how source revisions are created and managed.
URI: slsa_source_track
Identifier and Mapping Information
Section titled “Identifier and Mapping Information”Schema Source
Section titled “Schema Source”- from schema: https://w3id.org/lmodel/slsa
Classes in subset
Section titled “Classes in subset”| Class | Description |
|---|---|
| SlsaBranch | A named reference that moves to track a line of development |
| SlsaConsumer | A party that uses software a producer provides, verifying its provenance itse… |
| SlsaInfrastructureProvider | A party that provides software or services to the other roles, such as a pack… |
| SlsaNamedReference | A user-friendly name for a revision in a repository, such as main or v1 |
| SlsaParty | A person or organization that takes part in a software supply chain, in one o… |
| SlsaPredicate | The base of every predicate this schema models; the predicate_kind it takes f… |
| SlsaSourceControlSystem | The platform or services that host a source repository and enforce its organi… |
| SlsaSourceProvenance | Evidence from an SCS of how a revision came to exist and which technical cont… |
| SlsaSourceRepository | A self-contained unit that holds a set of files, their revision history and m… |
| SlsaSourceRevision | A logically immutable snapshot of a repository’s tracked files, with its vers… |
| SlsaStatement | An in-toto statement with the fields this schema adds: where the signed attes… |
| SlsaTag | A named reference meant never to move once created |
| SlsaVerificationSummary | The predicate in which a verifier records that it evaluated artifacts against… |
| SlsaVerificationSummaryInputAttestation | One attestation a verifier consulted: a resource descriptor that carries the … |
| SlsaVerificationSummaryPolicy | The policy a verification summary applied: a resource descriptor that names t… |
| SlsaVerifier | A party that inspects provenance or other attestations and decides whether an… |
Slots from SlsaBranch also in slsa_source_track
Section titled “Slots from SlsaBranch also in slsa_source_track”| Name | Cardinality and Range | Description |
|---|---|---|
| repository | 0..1 SlsaSourceRepository |
The source repository this belongs to |
| revision | 0..1 SlsaSourceRevision |
The source revision this refers to |
Slots from SlsaNamedReference also in slsa_source_track
Section titled “Slots from SlsaNamedReference also in slsa_source_track”| Name | Cardinality and Range | Description |
|---|---|---|
| repository | 0..1 SlsaSourceRepository |
The source repository this belongs to |
| revision | 0..1 SlsaSourceRevision |
The source revision this refers to |
Slots from SlsaSourceProvenance also in slsa_source_track
Section titled “Slots from SlsaSourceProvenance also in slsa_source_track”| Name | Cardinality and Range | Description |
|---|---|---|
| revision | 1 SlsaSourceRevision |
The source revision this refers to |
Slots from SlsaSourceRevision also in slsa_source_track
Section titled “Slots from SlsaSourceRevision also in slsa_source_track”| Name | Cardinality and Range | Description |
|---|---|---|
| repository | 0..1 SlsaSourceRepository |
The source repository this belongs to |
Slots from SlsaTag also in slsa_source_track
Section titled “Slots from SlsaTag also in slsa_source_track”| Name | Cardinality and Range | Description |
|---|---|---|
| repository | 0..1 SlsaSourceRepository |
The source repository this belongs to |
| revision | 0..1 SlsaSourceRevision |
The source revision this refers to |
Slots from SlsaVerificationSummary also in slsa_source_track
Section titled “Slots from SlsaVerificationSummary also in slsa_source_track”| Name | Cardinality and Range | Description |
|---|---|---|
| organization_properties | * String |
Properties the organization defines for the revision, each prefixed ORG_SOURC… |
Slots in subset
Section titled “Slots in subset”| Slot | Description |
|---|---|
| organization_properties | Properties the organization defines for the revision, each prefixed ORG_SOURC… |
| repository | The source repository this belongs to |
| revision | The source revision this refers to |
Enumerations in subset
Section titled “Enumerations in subset”| Enumeration | Description |
|---|---|
| SlsaResult | A result of evaluating an artifact against SLSA: a track level, a verified pr… |
| SlsaReviewType | The forms of review that may approve a revision, including the contested form… |
| SlsaSourceLevel | The levels of the SLSA Source track, each adding trust in how a revision was … |
| SlsaVerificationResult | The outcome of verifying an artifact against a policy |