thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Advanced

SLSA Build Levels

The graded levels of the SLSA Build track that describe increasing guarantees about how an artifact was built.

Definition

In SLSA v1.0, Build L1 requires provenance showing how the package was built, L2 requires a hosted build platform that signs provenance, and L3 requires a hardened build platform that prevents runs from influencing each other and protects signing secrets. Higher levels make tampering harder and more detectable.

Example

A project reaches Build L3 by using a hardened hosted CI service that generates signed, non-forgeable provenance.

Exam tip

Know that SLSA levels are about build integrity and provenance, not code quality.

Related terms