hard20 pts · first answer countsdevsecopssupply-chain

What SLSA Build L3 adds

Your builds already produce signed provenance from a hosted CI service (SLSA Build L2). What does moving to SLSA Build Level 3 mainly add?

A.A list of every licence in the dependency treeB.Two human reviewers required on every code changeC.Signed Git commits from every single developerD.A hardened builder that builds cannot tamper with

Discussion 0

Join free to post in the discussion.

What SLSA Build L3 adds

Discussion 0

Related questions