search

slsa-framework / slsa

Supply-chain Levels for Software Artifacts
https://slsa.dev
Other
1.48k stars 212 forks source link

Create guidance for consumers on how to evaluate the source platform #1078

Open TomHennen opened 1 week ago

TomHennen commented 1 week ago

@joshuagl notes that in SLSA v1 we provide guidance to consumers on how to evaluate build platforms https://slsa.dev/spec/v1.0/verifying-systems.

We should do something similar for source.

TomHennen commented 1 week ago

See discussion here