We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 4cfa60e commit 1433d80Copy full SHA for 1433d80
docs/attestations/README.md
@@ -0,0 +1,16 @@
1
+# Attestations
2
+
3
+BuildKit supports creating and attaching attestations to build artifacts.
4
+Generated attestations use the [in-toto attestation format](https://github.com/in-toto/attestation).
5
6
+The currently supported attestation types are:
7
8
+- [SBOMs](./sbom.md)
9
+- [SLSA Provenance](./slsa-provenance.md)
10
11
+Upon generation, attestations are attached differently to the export result:
12
13
+- For the `image`, `oci` and `docker` exporters, attestations are exported
14
+ using the attached [attestation storage](./attestation-storage.md).
15
+- For the `local` and `tar` exporters, attestations are written to separate
16
+ files within the output directory.
0 commit comments