Uses of Package
org.apache.commons.release.plugin.slsa.v1_2

Package
Description
SLSA 1.2 Build Attestation Models.
  • Class
    Description
    Inputs that define the build: the build type, external and internal parameters, and resolved dependencies.
    Entity that executed the build and is trusted to have correctly performed the operation and populated the provenance.
    Metadata about a build invocation: its identifier and start and finish timestamps.
    DSSE (Dead Simple Signing Envelope) that wraps a signed in-toto statement payload.
    Root predicate of an SLSA v1.2 provenance attestation, describing what was built and how.
    Description of an artifact or resource referenced in the build, identified by URI and cryptographic digest.
    Details about the build invocation: the builder identity, execution metadata, and any byproduct artifacts.
    A single cryptographic signature within a DSSE envelope.
    In-toto v1 attestation envelope that binds a set of subject artifacts to an SLSA provenance predicate.