artifact.attestation.filename

Developmentstringas of v1.44.0

The provenance filename of the built attestation which directly relates to the build artifact filename. This filename SHOULD accompany the artifact at publish time. See the SLSA Relationship specification for more information.

Examples

golang-binary-amd64-v0.1.0.attestation
docker-image-amd64-v0.1.0.intoto.json1
release-1.tar.gz.attestation
file-name-package.tar.gz.intoto.json1

History

v1.31.011 Mar 2025
Stability label respelled from experimental to development.
v1.30.024 Jan 2025
Already present at v1.30.0, the oldest release tracked here (experimental).

Definition source Registry docs JSON Use with your agent →