FrameworkOpenSSF

SLSA: Supply-chain Levels for Software Artifacts

OpenSSF framework for improving integrity across build, provenance, and software artifact supply chains.

Open original sourceBack to Resources

Overview

SLSA provides a framework for improving the integrity of software build and release processes. Teams can use it to discuss build controls, provenance, and how artifacts are produced and verified.

This is a short Cloud6AI summary, not a reproduction of the source. Open the publisher’s page for the full material and any current updates.

Related resources

Software Supply Chain

OpenSSF Scorecard

OpenSSF tool for assessing open source project security health through automated checks.

Software Supply Chain

Sigstore

Open source project for signing, verifying, and protecting software artifacts in supply chains.

Software Supply Chain

NIST SSDF

NIST guidance for reducing software vulnerabilities through secure development practices.