SLSA
Framework for software supply-chain integrity
What it does
SLSA provides a software supply-chain security framework using levels and provenance requirements to describe controls around builds and source processes that contribute to the integrity of the resulting software and its associated supply-chain evidence.
When to use it
When planning release evidence, compare levels and provenance documentation with what the current build process can actually demonstrate.
