Attestation with SPDX 3 JSON documents

SPDX 3 JSON documents can be used as an in-toto attestation predicate (version 1.2.0 or later) by using the predicate type https://spdx.dev/Document/v3. The predicate data is the JSON content of the SPDX document.