43,317 blogs · 5,519,570 posts Claim your blog

Record · corpus.blog/posts/01a087da-f276-708d-91dc-3d6e5d040044

SLSA: Safeguarding artifact integrity across any software supply chain

sam.roque-worcel.com · published 20 January 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at sam.roque-worcel.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 12
Words captured: 1,304

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://handbook.gitlab.com/handbook/engineering/architecture/design-documents/slsa_level_3/

handbook.gitlab.com

https://slsa.dev/

slsa.dev

https://www.ncsc.govt.nz/alerts/widespread-supply-chain-compromise-impacting-npm-ecosystem/

ncsc.govt.nz

https://slsa.dev/spec/v1.0/requirements

slsa.dev

https://slsa.dev/spec/v1.2/build-provenance

slsa.dev

https://openid.net/developers/how-connect-works/

openid.net

https://github.com/sigstore/fulcio

github.com

https://docs.gitlab.com/ci/yaml/signing_examples/

docs.gitlab.com

https://docs.sigstore.dev/quickstart/quickstart-ci/

docs.sigstore.dev

Pin your npm/yarn dependencies Read at the source ↗

https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEF%20CON%2025%20-%20Hanno-Boeck-Abusing-Certificate-Transparency-Logs.pdf

media.defcon.org

https://docs.sigstore.dev/about/threat-model/

docs.sigstore.dev