Skip to content

Commit

Permalink
requirements are now referenced in claims
Browse files Browse the repository at this point in the history
  • Loading branch information
dasarpjonam authored Oct 31, 2023
1 parent 131a662 commit 2a2a97e
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions Attestations/en/0x40-Substantiating-Claims-With-Evidence.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
## Claims
`Claims` in the CycloneDX Attestation specification refer to statements about the attestation, such as the identity of the component, the identity of the entity that created the attestation, and the date and time of the attestation. Claims can also be made about the specific aspects of the component that are being attested to, such as its provenance, integrity, and security.

Claims are important because they provide context for the attestation and help consumers to understand what the attestation is saying. For example, a consumer can use the claims to determine whether or not the attestation is relevant to their needs, and whether or not they can trust the entity that created the attestation. Consumers of CycloneDX Attestations can use the claims to assess the trustworthiness of the attestation and to determine whether or not the attestation meets their needs.
Claims are important because they provide context for the attestation and help consumers to understand what the attestation is saying. For example, a consumer can use the claims to determine whether or not the attestation is relevant to their needs, and whether or not they can trust the entity that created the attestation. The needs of a consumer are encoded in the form of `requirements` in CycloneDX Attestation. The claims are made against the requirements i.e. claims in an attestation references the requirements they satisfy. The consumer of the attestation can use the referenced requirements in the claim to verify if a claim satifies their needs.

Some examples of claims that can be made in a CycloneDX Attestation:

Expand Down Expand Up @@ -43,4 +43,4 @@ The evidence in this example provides support for the claim that the software co

<div style="page-break-after: always; visibility: hidden">
\newpage
</div>
</div>

0 comments on commit 2a2a97e

Please sign in to comment.