Provenance - CI/CD用語集の定義
Provenance は、artifact が何からどのように build されたか (ソースのコミット、builder、入力) を記録した署名付きメタデータで、supply chain の信頼の基盤 (例: SLSA) を形成します。
関連ガイド
Attestation - CI/CD Glossary DefinitionAn attestation is a signed statement about an artifact - its provenance, scan results, or test status - that…
Code Signing - CI/CD Glossary DefinitionCode signing attaches a cryptographic signature to an artifact so consumers can verify it came from the expec…
Reproducible Build - CI/CD Glossary DefinitionA reproducible build produces bit-for-bit identical output from the same source and inputs, letting anyone ve…