Skip to content

SLSA - CI/CD用語集の定義

SLSA(Supply-chain Levels for Software Artifacts)は、buildの完全性に対する段階的な保証レベルのフレームワークであり、署名付きのprovenanceや隔離されたhermetic buildといった制御を規定します。

関連ガイド

Provenance Attestation - CI/CD Glossary DefinitionA provenance attestation is a signed record of how an artifact was built - source, builder, inputs - that con… Hermetic Build - CI/CD Glossary DefinitionA hermetic build runs sealed from the network and host state, using only declared inputs, so the same sources… Supply-Chain Security - CI/CD Glossary DefinitionSupply-chain security protects every step from source to deployed artifact - dependencies, build, signing - a…