thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

DevOps & Automation · Advanced

Supply-chain Levels for Software Artifacts (SLSA)

An OpenSSF security framework of graduated levels for ensuring the integrity of build processes and artifact provenance.

Definition

SLSA defines requirements for source and build integrity, such as hosted, isolated builds and signed, non-forgeable provenance. Higher levels make tampering with artifacts harder.

Example

A GitHub Actions workflow generates signed SLSA provenance attestations for release binaries.

Exam tip

SLSA focuses on provenance and build integrity, complementing SBOMs that list contents.

Related terms