Supply-chain Levels for Software Artifacts (SLSA)

wikipedia:SLSA

• https://github.com/slsa-framework
• https://slsa.dev

brew install slsa-verifier

slsa-verifier-linux-amd64 verify-artifact

• GitLab 15.1 (Jun 2022)

Activities

• Read Googleblog article from Jun 2021 https://security.googleblog.com/2021/06/introducing-slsa-end-to-end-framework.html

Related

• SolarWinds
• Codecov
• Artifact
• Open Source Security Foundation

See also

• SLSA, slsa-verifier
• Artifact, Registry, SLSA