Extra Credit

SLSA Specification

Official docs outline

7 sections
  1. About SLSA

    Supply chain threats SLSA addresses.

  2. Terminology

    Artifact, provenance, builder and attestation terms.

  3. Levels

    Build track levels L1 to L3.

  4. Requirements

    Producer, build platform and consumer requirements.

  5. Provenance format

    Provenance predicate fields.

  6. Verifying artifacts

    Consumer verification of provenance.

  7. Threats and mitigations

    Threat catalog from source to dependencies.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.

All 18