SLSA - Definição do Glossário de CI/CD
SLSA (Supply-chain Levels for Software Artifacts) é um framework de níveis incrementais de garantia para a integridade do build, prescrevendo controles como provenance assinado e builds isolados e herméticos.
Guias relacionados
Provenance Attestation - CI/CD Glossary DefinitionA provenance attestation is a signed record of how an artifact was built - source, builder, inputs - that con…
Hermetic Build - CI/CD Glossary DefinitionA hermetic build runs sealed from the network and host state, using only declared inputs, so the same sources…
Supply-Chain Security - CI/CD Glossary DefinitionSupply-chain security protects every step from source to deployed artifact - dependencies, build, signing - a…