Extra Credit

SLSA

Official docs outline

11 sections
  1. About SLSA

    Overview, goals and scope of SLSA.

  2. Terminology

    Artifacts, builds, provenance and trust model definitions.

  3. Supply Chain Threats

    Source, build, dependency and distribution threats.

  4. Build Track Levels

    Requirements for Build L1 through L3.

  5. Source Track

    Source track levels and requirements.

  6. Build Provenance

    The SLSA provenance predicate format.

  7. Verifying Artifacts

    Consumers verifying provenance and expectations.

  8. Assessing Build Platforms

    Assessing build platforms against SLSA requirements.

  9. Distributing Provenance

    Storing and publishing provenance attestations.

  10. Principles

    Core design principles of SLSA.

  11. Verification Summary Attestation

    VSA format summarizing verified SLSA level of an artifact.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.

All 10