Skip to main content

Module statement

Module statement 

Source
Expand description

in-toto Statements v1 for a ticked task: test-result per test phase, a SLSA verification summary (vsa), and speccoder’s task-verification.

Structs§

PhaseResult
One phase’s result.
Subject
What every statement of one tick is about: the task commit.
Summary
What a VSA summarises.

Enums§

Phase
A test phase of one tick.

Constants§

POLICY
The policy a VSA names: the judge’s configuration.
STATEMENT
Statement v1’s _type.
TASK_VERIFICATION
speccoder’s own: this task was verified against this spec.
TEST_RESULT
in-toto’s test-result predicate.
VERIFIER
Who verifies, in a VSA.
VSA
SLSA’s verification summary.

Functions§

canonical
The canonical bytes of v: keys sorted at every level, no whitespace. What is signed, so it must not depend on how a map was built.
check_clean
Why v may not go into a statement: an absolute local path, a URL with credentials, or something shaped like a secret (FR-013).
statement
A statement about subject.
test_result
The test-result predicate of r.
vsa
The VSA predicate of s.