File tree 2 files changed +16
-4
lines changed
2 files changed +16
-4
lines changed Original file line number Diff line number Diff line change @@ -12,11 +12,12 @@ community! Please see our [New Predicate Guidelines].
12
12
This directory contains predicate specification types that have gone through
13
13
our [ vetting process] , and may be of general interest:
14
14
15
- - [ SLSA Provenance] : To describe the build process of a software artifact.
15
+ - [ SLSA Provenance] : Describes how an artifact or set of artifacts was
16
+ produced.
16
17
- [ Link] : For migration from [ in-toto 0.9] .
17
18
- [ SCAI Report] : Evidence-based assertions about software artifact and
18
19
supply chain attributes or behavior.
19
- - [ Runtime Traces] : To capture runtime traces of software supply chain
20
+ - [ Runtime Traces] : Captures runtime traces of software supply chain
20
21
operations.
21
22
- [ SLSA Verification Summary] : SLSA verification decision about a software
22
23
artifact.
Original file line number Diff line number Diff line change @@ -5,8 +5,19 @@ Version: [DSSE v1.0]
5
5
The Envelope is the outermost layer of the attestation, handling
6
6
authentication and serialization.
7
7
8
- The format and protocol are defined per [ DSSE v1.0] . In the in-toto
9
- Attestation Framework, the DSSE payload is a base64-encoded JSON [ Statement] .
8
+ ## Schema
9
+
10
+ The format and protocol are defined per [ DSSE v1.0] .
11
+
12
+ ## Fields
13
+
14
+ The in-toto Attestation Framework has the following requirements for the
15
+ standard DSSE fields.
16
+
17
+ - ` payloadType ` MUST be set to ` application/vnd.in-toto+json ` , which
18
+ indicates that the Envelope contains a JSON object with a ` _type ` field
19
+ specifying its schema.
20
+ - ` payload ` MUST be a base64-encoded JSON [ Statement] .
10
21
11
22
[ DSSE v1.0 ] : https://github.com/secure-systems-lab/dsse/blob/v1.0.0/envelope.md
12
23
[ Statement ] : statement.md
You can’t perform that action at this time.
0 commit comments