TODO_TAGS_REVIEW

SLSA Provenance Verifier

Verifies an in-toto SLSA provenance statement: validates _type (in-toto.io/Statement) and predicateType (slsa.dev/provenance), checks subject SHA-256 digest against caller-supplied artifact_digest_sha256, asserts builder.id present via runDetails.builder.id or predicate.builder.id, reports claimed_build_level 0-3. Middle stage of sbom-provenance-attestation chain.

Tool URL: https://ainumbers.co/chaingraph/art-136-slsa-provenance-verifier.html AP2/Policy Mandate export: yes

post/v1/tools/verify_slsa_provenance

Request

  • Base URL: https://ainumbers.co
  • URL: https://ainumbers.co/v1/tools/verify_slsa_provenance
  • Auth: none declared

Request body

artifact_digest_sha256unknown
claimed_build_levelunknown
statementunknown

Response

Successful tool execution result

builder_id_presentboolean
pred_okboolean
provenance_validboolean
slsa_build_levelinteger
subject_digest_matchboolean
type_okboolean

Changes

No recorded changes to this operation across all 1 revision of this API.