Skip to content

fix(schema): allow SLSA Level 0 for software-only platforms (TRACE v0.2) #21

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
harshnair75567-cloud wants to merge 3 commits into
base: main
Choose a base branch
from
Open

fix(schema): allow SLSA Level 0 for software-only platforms (TRACE v0.2) #21

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
58069c4
Change slsa_level minimum from 1 to 0
harshnair75567-cloud Jun 21, 2026
aa84ce0
Update SLSA levels to include level 0
harshnair75567-cloud Jun 21, 2026
ac96ead
Update SLSA level range in test case
harshnair75567-cloud Jun 21, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion schemas/trace-claim.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -62,7 +62,7 @@
"type": "object",
"required": ["slsa_level", "digest"],
"properties": {
"slsa_level": {"type": "integer", "minimum": 1, "maximum": 3},
"slsa_level": {"type": "integer", "minimum": 0, "maximum": 3},
"builder": {"type": "string"},
"digest": {"type": "string", "pattern": "^sha(256:[0-9a-f]{64}|384:[0-9a-f]{96})$"},
"provenance_uri": {"type": "string", "format": "uri"}
Expand Down
4 changes: 2 additions & 2 deletions src/trace_tests/modules/tr_sca.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@
from trace_tests.result import Finding, Status

_DIGEST_RE = re.compile(r"^sha(256:[0-9a-f]{64}|384:[0-9a-f]{96})$")
_SLSA_LEVELS = frozenset({1, 2, 3})
_SLSA_LEVELS = frozenset({0,1, 2, 3})


def check(trace: dict[str, Any]) -> list[Finding]:
Expand All @@ -28,7 +28,7 @@ def check(trace: dict[str, Any]) -> list[Finding]:
else:
findings.append(Finding(
"TR-SCA-001", Status.FAIL,
f"TR-SCA-001: build_provenance.slsa_level must be 1, 2, or 3, got {slsa_level!r}",
f"TR-SCA-001: build_provenance.slsa_level must be 0,1, 2, or 3, got {slsa_level!r}",
))

digest = prov.get("digest", "")
Expand Down
2 changes: 1 addition & 1 deletion tests/test_level0.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,7 @@ def test_policy_enforcement_mode_known(self, valid_level0):
assert valid_level0["policy"]["enforcement_mode"] in VALID_ENFORCEMENT

def test_build_provenance_slsa_level_range(self, valid_level0):
assert valid_level0["build_provenance"]["slsa_level"] in (1, 2, 3)
assert valid_level0["build_provenance"]["slsa_level"] in (0,1, 2, 3)

def test_build_provenance_digest_format(self, valid_level0):
assert DIGEST_RE.match(valid_level0["build_provenance"]["digest"])
Expand Down
Loading