Difference between revisions of "Provenance attestation"
Jump to navigation
Jump to search
| (6 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
| + | [[Provenance]] attestation | ||
| + | * https://docs.docker.com/build/metadata/attestations/slsa-provenance/ | ||
| + | |||
| + | Provenance attestations include facts about the build process, including details such as: | ||
| + | * [[Build timestamp]] | ||
| + | * [[Build parameters and environment]] | ||
| + | * [[Version control metadata]] | ||
| + | * [[Source code details]] | ||
| + | * [[Materials (files, scripts) consumed during the build]] | ||
| + | |||
| − | [[ | + | * Provenance attestation (https://slsa.dev/provenance/v0.2) with [[max mode]] exists |
| + | * [[slsa.dev]] | ||
| + | * [[SBOM Attestations]] | ||
| + | == See also == | ||
| + | * {{scout}} | ||
| − | + | [[Category:Docker Scout]] | |
Latest revision as of 19:21, 27 October 2024
Provenance attestation
Provenance attestations include facts about the build process, including details such as:
- Build timestamp
- Build parameters and environment
- Version control metadata
- Source code details
- Materials (files, scripts) consumed during the build
- Provenance attestation (https://slsa.dev/provenance/v0.2) with max mode exists
- slsa.dev
- SBOM Attestations
See also[edit]
Advertising:
