Expand description
in-toto Statements v1 for a ticked task: test-result per test phase, a
SLSA verification summary (vsa), and speccoder’s task-verification.
Structs§
- Phase
Result - One phase’s result.
- Subject
- What every statement of one tick is about: the task commit.
- Summary
- What a VSA summarises.
Enums§
- Phase
- A test phase of one tick.
Constants§
- POLICY
- The policy a VSA names: the judge’s configuration.
- STATEMENT
- Statement v1’s
_type. - TASK_
VERIFICATION - speccoder’s own: this task was verified against this spec.
- TEST_
RESULT - in-toto’s test-result predicate.
- VERIFIER
- Who verifies, in a VSA.
- VSA
- SLSA’s verification summary.
Functions§
- canonical
- The canonical bytes of
v: keys sorted at every level, no whitespace. What is signed, so it must not depend on how a map was built. - check_
clean - Why
vmay not go into a statement: an absolute local path, a URL with credentials, or something shaped like a secret. - statement
- A statement about
subject. - test_
result - The
test-resultpredicate ofr. - vsa
- The VSA predicate of
s.