Unverified Commit 070a57ab authored by Tom Hennen's avatar Tom Hennen Committed by GitHub
Browse files

Merge pull request #98 from jchestershopify/explicitly-allow-multiple-hashs

Explicitly allow multiple provenance hashes
parents 37c50f98 ae4219f9
......@@ -368,9 +368,12 @@ Requirements on the contents of the provenance:
<td>Identifies Artifact
<td>
The provenance identifies the output artifact via a cryptographic hash. The
RECOMMENDED algorithm is SHA-256 for cross-system compatibility. If another
algorithm is used, it SHOULD be resistant to collisions and second preimages.
The provenance MUST identify the output artifact via at least one
cryptographic hash. The provenance MAY provide multiple identifying
cryptographic hashes using different algorithms. When only one hash is
provided, the RECOMMENDED algorithm is SHA-256 for cross-system
compatibility. If another algorithm is used, it SHOULD be resistant to
collisions and second preimages.
<td><td><td><td>
<tr id="identifies-builder">
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment