security
SLSA
Supply Chain Levels for Software Artifacts
Definition
SLSA is a security framework that defines four progressive levels of supply chain integrity, from basic build provenance (Level 1) to hermetic, reproducible builds with verified provenance (Level 4). Achieving a given SLSA level provides assurance that artifacts were not tampered with between source code and deployment.
SLSA provenance attestations are machine-verifiable and can be enforced in deployment pipelines.
Can this ship? Are we exposed? Can you prove it?
Every CISO is asking these three questions. We answer them with facts, not guesses, from repository to runtime.