JFrog · Schema

CreateEvidenceRequest

ArtifactoryCI/CDContainer RegistryDevOpsMLOpsPackage ManagementSecuritySoftware Supply Chain

Properties

Name	Type	Description
subject_type	string	Type of the subject to attach evidence to
subject	object	Subject identifier (fields depend on subject_type)
predicate	object	The evidence predicate content (in-toto statement predicate)
predicate_type	string	URI identifying the predicate type (e.g., https://in-toto.io/attestation/vulns)
key_alias	string	Alias of the public key registered for signature verification
dsse_envelope	string	Pre-signed DSSE envelope (alternative to providing predicate and key)

View JSON Schema on GitHub

JSON Schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/CreateEvidenceRequest",
  "title": "CreateEvidenceRequest",
  "type": "object",
  "properties": {
    "subject_type": {
      "type": "string",
      "description": "Type of the subject to attach evidence to",
      "enum": [
        "artifact",
        "build",
        "package",
        "release_bundle"
      ]
    },
    "subject": {
      "type": "object",
      "description": "Subject identifier (fields depend on subject_type)",
      "properties": {
        "repo_path": {
          "type": "string",
          "description": "Artifact repository path (for artifact subject)"
        },
        "sha256": {
          "type": "string",
          "description": "Artifact SHA-256 checksum (for artifact subject)"
        },
        "build_name": {
          "type": "string",
          "description": "Build name (for build subject)"
        },
        "build_number": {
          "type": "string",
          "description": "Build number (for build subject)"
        },
        "package_name": {
          "type": "string",
          "description": "Package name (for package subject)"
        },
        "package_version": {
          "type": "string",
          "description": "Package version (for package subject)"
        },
        "repo_key": {
          "type": "string",
          "description": "Repository key (for package subject)"
        },
        "release_bundle_name": {
          "type": "string",
          "description": "Release bundle name (for release_bundle subject)"
        },
        "release_bundle_version": {
          "type": "string",
          "description": "Release bundle version (for release_bundle subject)"
        },
        "project": {
          "type": "string",
          "description": "Project key for project-scoped subjects"
        }
      }
    },
    "predicate": {
      "type": "object",
      "additionalProperties": true,
      "description": "The evidence predicate content (in-toto statement predicate)"
    },
    "predicate_type": {
      "type": "string",
      "format": "uri",
      "description": "URI identifying the predicate type (e.g., https://in-toto.io/attestation/vulns)"
    },
    "key_alias": {
      "type": "string",
      "description": "Alias of the public key registered for signature verification"
    },
    "dsse_envelope": {
      "type": "string",
      "description": "Pre-signed DSSE envelope (alternative to providing predicate and key)"
    }
  },
  "required": [
    "subject_type",
    "subject"
  ]
}