JFrog · Schema

CreateEvidenceRequest

ArtifactoryCI/CDContainer RegistryDevOpsMLOpsPackage ManagementSecuritySoftware Supply Chain

Properties

Name	Type	Description
subject_type	string	Type of the subject to attach evidence to
subject	object	Subject identifier (fields depend on subject_type)
predicate	object	The evidence predicate content (in-toto statement predicate)
predicate_type	string	URI identifying the predicate type (e.g., https://in-toto.io/attestation/vulns)
key_alias	string	Alias of the public key registered for signature verification
dsse_envelope	string	Pre-signed DSSE envelope (alternative to providing predicate and key)

View JSON Schema on GitHub

JSON Schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/CreateEvidenceRequest",
  "title": "CreateEvidenceRequest",
  "type": "object",
  "properties": {
    "subject_type": {
      "type": "string",
      "description": "Type of the subject to attach evidence to",
      "enum": [
        "artifact",
        "build",
        "package",
        "release_bundle"
      ]
    },
    "subject": {
      "type": "object",
      "description": "Subject identifier (fields depend on subject_type)",
      "properties": {
        "repo_path": {
          "type": "string",
          "description": "Artifact repository path (for artifact subject)"
        },
        "sha256": {
          "type": "string",
          "description": "Artifact SHA-256 checksum (for artifact subject)"
        },
        "build_name": {
          "type": "string",
          "description": "Build name (for build subject)"
        },
        "build_number": {
          "type": "string",
          "description": "Build number (for build subject)"
        },
        "package_name": {
          "type": "string",
          "description": "Package name (for package subject)"
        },
        "package_version": {
          "type": "string",
          "description": "Package version (for package subject)"
        },
        "repo_key": {
          "type": "string",
          "description": "Repository key (for package subject)"
        },
        "release_bundle_name": {
          "type": "string",
          "description": "Release bundle name (for release_bundle subject)"
        },
        "release_bundle_version": {
          "type": "string",
          "description": "Release bundle version (for release_bundle subject)"
        },
        "project": {
          "type": "string",
          "description": "Project key for project-scoped subjects"
        }
      }
    },
    "predicate": {
      "type": "object",
      "additionalProperties": true,
      "description": "The evidence predicate content (in-toto statement predicate)"
    },
    "predicate_type": {
      "type": "string",
      "format": "uri",
      "description": "URI identifying the predicate type (e.g., https://in-toto.io/attestation/vulns)"
    },
    "key_alias": {
      "type": "string",
      "description": "Alias of the public key registered for signature verification"
    },
    "dsse_envelope": {
      "type": "string",
      "description": "Pre-signed DSSE envelope (alternative to providing predicate and key)"
    }
  },
  "required": [
    "subject_type",
    "subject"
  ]
}

Work with this as data

Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for schemas

4 MCP tools reach this

find_json_schemasBrowse and filter every JSON Schema in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This JSON Schema

curl "https://apis.io/api/v1/json-schemas/jfrog-createevidencerequest"

All schemas

curl "https://apis.io/api/v1/json-schemas?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.