Skip to content

Commit fad8602

Browse files
authored
Replace persistAnce with persistEnce (#39)
1 parent a6f7861 commit fad8602

File tree

2 files changed

+5
-5
lines changed

2 files changed

+5
-5
lines changed

README.md

+4-4
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ In SCITT, structured data is a claim. A claim is a well-structured statement, ma
2323

2424
Documenting claims at the time software is built or deployed would sell SCITT short, as software isn't static. Software is continually updated, and more importantly, we continually learn and want to convey new information about artifacts that have already been released. Reputable OSS Projects and Independent Software Vendors (ISVs) don't intentionally produce software they know to be vulnerable. Only after the software is public do we often find out about new vulnerabilities. SCITT is a means to convey a stream of continual updates for each versioned artifact.
2525

26-
## SCITT Persistance
26+
## SCITT Persistence
2727

2828
SCITT is intended to store verifiable claims for the life of the of the SCITT instance. One of the many questions that surfaces is how big will the SCITT ledger get? What kind of data will go on the SCITT ledger that would cause it to grow?
2929

@@ -33,12 +33,12 @@ SCITT is analogous to a digital, or electronic notary service (eNotary), where m
3333

3434
In SCITT, the ledger will contain pointers to the artifact, which the claims are made, with pointers to any supporting evidence.
3535

36-
### Evidence Persistance
36+
### Evidence Persistence
3737

3838
A SCITT instance will persist verifiable claims to its ledger. Any optional evidence will be persisted in associated storage.
3939

40-
<img src="./assets/scitt-persistence.png" alt="SCITT persistance" style="width:600px;"/>
40+
<img src="./assets/scitt-persistence.png" alt="SCITT persistence" style="width:600px;"/>
4141

42-
While a SCITT instance should provide a default storage, there's no limit on what storage services are used. For package managers that support breadths of content types, the evidence may be stored alongside the artifact by which the claim is being made. For package managers that limit the content types to the specific package type, a SCITT instance should provide default storage persistance.
42+
While a SCITT instance should provide a default storage, there's no limit on what storage services are used. For package managers that support breadths of content types, the evidence may be stored alongside the artifact by which the claim is being made. For package managers that limit the content types to the specific package type, a SCITT instance should provide default storage persistence.
4343

4444
For more info, see: [Supply Chains]({% link supply-chain.md %})

components/artifacts--claims-evidence.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ The relationship between a Claim, SCITT and Evidence can be viewed as the follow
1515

1616
1. Artifacts are stored, where they're stored. These could be container images stored in a registry. various package managers in their registry, binaries on a download center, or drivers on a website/storage account.
1717
2. A "pointer", which is currently thought to be a purl, with a hash as the identity, is used create an identity, that isn't tied to a location. (see [Decoupling Location from Identity - Is this in the scope of purl?#127](https://github.com/package-url/purl-spec/issues/127))
18-
3. SCITT provides ledger services, with [eNotary](enotary.md) to validate trusted identities. The SCITT Ledger will have different forms of persistance, based on the instance.
18+
3. SCITT provides ledger services, with [eNotary](enotary.md) to validate trusted identities. The SCITT Ledger will have different forms of persistence, based on the instance.
1919
4. Evidence, such as the SBOM, Vex or VDR Report are persisted in an associated storage account. The receipt from the ledger is stored alongside the evidence, providing verification the evidence was processed by the SCITT eNotary. Most SCITT instances will likely have a default storage system, however SCITT entries should support external storage.
2020
5. A "pointer", currently thought to be a purl, will maintain the identity and location hint between the ledger and the evidence storage. The purl could be yet another location. For example, when an SBOM is submitted to the ledger for eNotarization, it may provide a purl identifier to the eNotary, which is then entered into the ledger. A receipt is then returned.
2121
> Issue: if an external purl is provided for the evidence location, where is the receipt placed? Is it assumed the receipt is placed at the same location as the external purl?

0 commit comments

Comments
 (0)