Slide 47
Slide 47 text
{
"_type": "https://in-toto.io/Statement/v0.1",
"subject": [{ ... }],
"predicateType": "https://slsa.dev/provenance/v0.2",
"predicate": {
"builder": {
"id": ""
},
"buildType": "",
"invocation": {
"configSource": {
"uri": "",
"digest": { /* DigestSet */ },
"entryPoint": ""
},
"parameters": { /* object */ },
"environment": { /* object */ }
},
…
…
"buildConfig": { /* object */ },
"metadata": {
"buildInvocationId": "",
"buildStartedOn": "",
"buildFinishedOn": "",
"completeness": {
"parameters": true/false,
"environment": true/false,
"materials": true/false
},
"reproducible": true/false
},
"materials": [
{
"uri": "",
"digest": { /* DigestSet */ }
}
]
}}
invocation - Execution command / information
Example:
"invocation": {
"configSource": {
"uri": "git+https://github.com/foo/bar.git,
"digest": { "sha1": "1234..."}, //git commit hash
"entryPoint": "build.yaml:build"
},
"parameters": {"inputs": {}},
"environment": {
“arch”: “amd64”,
"env": {
"GITHUB_RUN_ID": "1234",
"GITHUB_RUN_NUMBER": "5678",
"GITHUB_EVENT_NAME": "push"
}
}
}