{"source":"semconv","version":"1.44.0","attribute":{"id":"artifact.hash","type":"string","stability":"development","brief":"The full [hash value (see glossary)](https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf), often found in checksum.txt on a release of the artifact and used to verify package integrity.","note":"The specific algorithm used to create the cryptographic hash value is\nnot defined. In situations where an artifact has multiple\ncryptographic hashes, it is up to the implementer to choose which\nhash value to set here; this should be the most secure hash algorithm\nthat is suitable for the situation and consistent with the\ncorresponding attestation. The implementer can then provide the other\nhash values through an additional set of attribute extensions as they\ndeem necessary.","examples":["9ff4c52759e2c4ac70b7d517bc7fcdc1cda631ca0045271ddd1b192544f8a3e9"],"namespace":"artifact","definedIn":"model/artifact/registry.yaml","usedBy":[]},"history":[{"version":"1.30.0","publishedAt":"2025-01-24T19:11:42Z","kind":"first-seen","detail":"Already present at v1.30.0, the oldest release tracked here (experimental)."},{"version":"1.31.0","publishedAt":"2025-03-11T00:53:13Z","kind":"stability-changed","detail":"Stability label respelled from experimental to development.","severity":"informational"}],"replaces":[]}