Skip to content
This repository has been archived by the owner on Apr 9, 2024. It is now read-only.

Commit

Permalink
Update after review
Browse files Browse the repository at this point in the history
  • Loading branch information
rbehjati committed May 3, 2023
1 parent fb42a0a commit 92daacc
Show file tree
Hide file tree
Showing 2 changed files with 9 additions and 7 deletions.
13 changes: 7 additions & 6 deletions pkg/amber/endorsement.go
Original file line number Diff line number Diff line change
Expand Up @@ -39,12 +39,13 @@ type VerifiedProvenanceSet struct {
Provenances []ProvenanceData
}

// ProvenanceData contains metadata about a provenance statement. The statement may be wrapped in a
// DSSE envelope, or a Sigstore Bundle. The metadata identifies the provenance via a URI and a
// SHA256 digest. The digest may be the SHA256 digest of the provenance content, the DSSE envelope,
// or the Sigstore Bundle. We don't need to explicitly distinguish between these different media
// types in the ProvenanceData, because this metadata is used as the evidence of an Endorsement
// statement, where the media type has no use or relevance.
// ProvenanceData identifies a provenance statement via a URI and a SHA256
// digest. The provenance statement may be wrapped in a DSSE envelope, or a
// Sigstore Bundle. The SHA256 digest may be the digest of the provenance
// content, the DSSE envelope, or the Sigstore Bundle. We don't need to
// explicitly distinguish between these different media types in the
// ProvenanceData, because this information is used as the evidence in an
// Endorsement statement, where the media type has no use or relevance.
type ProvenanceData struct {
URI string
SHA256Digest string
Expand Down
3 changes: 2 additions & 1 deletion pkg/intoto/slsa_provenance/v1/provenance.go
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,8 @@ const (
DockerBasedBuildType = "https://slsa.dev/container-based-build/v0.1?draft"
)

// ProvenancePredicate is the provenance predicate definition.
// ProvenancePredicate defines the structure of a SLSA v1 provenance predicate.
// See the specification in https://slsa.dev/spec/v1.0/.
type ProvenancePredicate struct {
// The BuildDefinition describes all of the inputs to the build.
BuildDefinition ProvenanceBuildDefinition `json:"buildDefinition"`
Expand Down

0 comments on commit 92daacc

Please sign in to comment.