Subset: slsa_ssf
Elements this schema adds from the CNCF TAG-Security Secure Software Factory reference architecture and the OpenSSF supply-chain projects. They are not part of the SLSA specification.
URI: slsa_ssf
Identifier and Mapping Information
Section titled “Identifier and Mapping Information”Schema Source
Section titled “Schema Source”- from schema: https://w3id.org/lmodel/slsa
Slots in subset
Section titled “Slots in subset”| Slot | Description |
|---|---|
| guac_uri | Where a GUAC instance answers queries about the package’s dependency and prov… |
| pipeline_orchestrator | The CI/CD system that coordinated the build, named by URI, where it differs f… |
| security_insights_uri | The SECURITY-INSIGHTS |
| signing_tool | The tool that signed the attestation, named by URI, such as Cosign or Notatio… |
| transparency_log_entry | The transparency log entry that records the signature, such as a Rekor entry |