OpenSSF releases SLSA v1.0, adds software supply chain-specific tracks
SLSA v1.0 has been designed to make the software supply chain security framework more accessible and specific to areas of the software delivery lifecycle.
Stay updated with breaking news from Software Artifacts. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
SLSA v1.0 has been designed to make the software supply chain security framework more accessible and specific to areas of the software delivery lifecycle.
The project provides specifications for software supply chain that have been established by community consensus.
Organisations need to have a thorough understanding of software components and build security controls into development lifecycles to shore up the security of their software supply chains.
With the two new services, Google aims to help minimise risk from malicious code in the software supply chain.
With the two new services, Google aims to help minimize risk from malicious code in the software supply chain.