Provenance - CI/CD Glossary Definition
Provenance is signed metadata recording how and from what an artifact was built (source commit, builder, inputs), forming the basis of supply-chain trust (e.g. SLSA).
Related guides
Attestation - CI/CD Glossary DefinitionAn attestation is a signed statement about an artifact - its provenance, scan results, or test status - that…
Code Signing - CI/CD Glossary DefinitionCode signing attaches a cryptographic signature to an artifact so consumers can verify it came from the expec…
Reproducible Build - CI/CD Glossary DefinitionA reproducible build produces bit-for-bit identical output from the same source and inputs, letting anyone ve…