Skip to content

statement.md

Latest commit

 

History

History
73 lines (59 loc) · 2.43 KB

statement.md

File metadata and controls

73 lines (59 loc) · 2.43 KB

Statement layer specification

The Statement is the middle layer of the attestation, binding it to a particular subject and unambiguously identifying the types of the Predicate.

Schema

{
  "_type": "https://in-toto.io/Statement/v1",
  "subject": [
    {
      "name": "<NAME>",
      "digest": {"<ALGORITHM>": "<HEX_VALUE>"}
    },
    ...
  ],
  "predicateType": "<URI>",
  "predicate": { ... }
}

Fields

The Statement is represented as a JSON object with the following fields. Additional parsing rules apply.

_type string (TypeURI), required

Identifier for the schema of the Statement. Always https://in-toto.io/Statement/v1 for this version of the spec.

subject array of ResourceDescriptor objects, required

Set of software artifacts that the attestation applies to. Each element represents a single software artifact. Each element MUST have digest set.

Subjects are assumed to be immutable, i.e. the artifacts identified by the subject SHOULD NOT change.

The name field may be used as an identifier to distinguish this artifact from others within the subject. Similarly, other ResourceDescriptor fields may be used as required by the context. The semantics are up to the producer and consumer and they MAY use them when evaluating policy. If the name is not meaningful, leave the field unset or use "_". For example, a SLSA Provenance attestation might use the name to specify output filename, expecting the consumer to only consider entries with a particular name. Alternatively, a vulnerability scan attestation might leave name unset because the results apply regardless of what the artifact is named.

If set, name and uri SHOULD be unique within subject.

IMPORTANT: Subject artifacts are matched purely by digest, regardless of content type. If this matters to you, please comment on GitHub Issue #28

predicateType string (TypeURI), required

URI identifying the type of the Predicate.

predicate object, optional

Additional parameters of the Predicate. Unset is treated the same as set-but-empty. MAY be omitted if predicateType fully describes the predicate.