From b017ab51da500323b6e10ce9a1fc0aa53d4cf6da Mon Sep 17 00:00:00 2001 From: Tom Hennen Date: Wed, 23 Oct 2024 17:07:10 +0000 Subject: [PATCH] Level 3 is about _provenance_ not just 'attestations' Signed-off-by: Tom Hennen --- docs/spec/draft/source-requirements.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/spec/draft/source-requirements.md b/docs/spec/draft/source-requirements.md index cf095b567..406ebd840 100644 --- a/docs/spec/draft/source-requirements.md +++ b/docs/spec/draft/source-requirements.md @@ -100,7 +100,7 @@ All organizations of any size producing software of any kind. Benefits: Allows source consumers to track changes to the software over time and attribute those changes to the people that made them. -### Level 3: Authenticatable and Auditable Attestations +### Level 3: Authenticatable and Auditable Provenance Summary: A consumer can ask the SCS for everything it knows about a specific revision of a repository.