SLSA Provenance Blog Series, Part 2: Deeper Dive Into SLSA Provenance

In Part 2 of this blog series, we uncover the details of SLSA provenance from end to end. Previously in Part 1, we started by reviewing in-toto attestations, which are the underlying technology of SLSA provenance. Now, we dive into the internals of SLSA provenance, understand its content, and how you can leverage SLSA provenance to improve the security of your software supply chain and gain more visibility into it. In the next post, we will go further into the …

appsec blog dive end in-toto provenance series slsa technology threats uncover understand