moby · jedevc · Jan 5, 2023 · Jan 5, 2023 · Jan 5, 2023
diff --git a/docs/attestations/README.md b/docs/attestations/README.md
@@ -0,0 +1,16 @@
+# Attestations
+
+BuildKit supports creating and attaching attestations to build artifacts.
+Generated attestations use the [in-toto attestation format](https://github.com/in-toto/attestation).
+
+The currently supported attestation types are:
+
+- [SBOMs](./sbom.md)
+- [SLSA Provenance](./slsa-provenance.md)
+
+Upon generation, attestations are attached differently to the export result:
+
+- For the `image`, `oci` and `docker` exporters, attestations are exported
+  using the attached [attestation storage](./attestation-storage.md).
+- For the `local` and `tar` exporters, attestations are written to separate
+  files within the output directory.
diff --git a/docs/attestation-storage.md → docs/attestations/attestation-storage.md b/docs/attestation-storage.md → docs/attestations/attestation-storage.md
diff --git a/docs/sbom-protocol.md → docs/attestations/sbom-protocol.md b/docs/sbom-protocol.md → docs/attestations/sbom-protocol.md
diff --git a/docs/sbom.md → docs/attestations/sbom.md b/docs/sbom.md → docs/attestations/sbom.md
diff --git a/docs/slsa-definitions.md → docs/attestations/slsa-definitions.md b/docs/slsa-definitions.md → docs/attestations/slsa-definitions.md
diff --git a/docs/slsa-provenance.md → docs/attestations/slsa-provenance.md b/docs/slsa-provenance.md → docs/attestations/slsa-provenance.md