Ryanyang: 새 문서: '''Supply chain Levels for Software Artifacts''', or '''SLSA (salsa).''' It’s a security framework, a check-list of standards and controls to prevent tampering, improve integrity, and secure packages and infrastructure in your projects, businesses or enterprises. It’s how you get from safe enough to being as resilient as possible, at any link in the chain. ([https://slsa.dev Link]) 파일:Supply chain vulnerabilities.png|대체글=supply chain vulnerabilit...

2022-03-23T15:50:06Z

새 문서: '''Supply chain Levels for Software Artifacts''', or '''SLSA (salsa).''' It’s a security framework, a check-list of standards and controls to prevent tampering, improve integrity, and secure packages and infrastructure in your projects, businesses or enterprises. It’s how you get from safe enough to being as resilient as possible, at any link in the chain. ([https://slsa.dev Link]) 파일:Supply chain vulnerabilities.png|대체글=supply chain vulnerabilit...

새 문서

'''Supply chain Levels for Software Artifacts''', or '''SLSA (salsa).'''

It’s a security framework, a check-list of standards and controls to prevent tampering, improve integrity, and secure packages and infrastructure in your projects, businesses or enterprises. It’s how you get from safe enough to being as resilient as possible, at any link in the chain. ([https://slsa.dev Link])

[[파일:Supply chain vulnerabilities.png|대체글=supply chain vulnerabilities|가운데|프레임없음|650x650픽셀|supply chain vulnerabilities]]
There are four Levels of assurance in SLA from Level 1 to Level 4.

[[파일:Levels of Assurance in SLA.png|대체글=Levels of Assurance in SLA|가운데|프레임없음|800x800픽셀|Levels of Assurance in SLA]]

Here is the first stop to get started to [https://slsa.dev/get-started#reaching-slsa-level-1 reach SLSA Level 1].

* Automate your builds
* Produce [https://slsa.dev/provenance/v0.2 provenance] data*

The second task is tightly related to software bill of materials or SBOM ([[SBOM|Link]]).
[[분류:IT 전문가]]
[[분류:IT]]
[[분류:소프트웨어 아키텍처]]
[[분류:소프트웨어]]
[[분류:컴퓨터공학]]
[[분류:컴퓨터]]
[[분류:Security]]
[[분류:보안]]

SLSA - 편집 역사