Record · corpus.blog/posts/01a0ca89-71bf-732a-b7c9-0e9c2ca64057

Introducing SLSA, an End-to-End Framework for Supply Chain Integrity

Google Security Blog · published 16 June 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at security.googleblog.com Wayback capture

3blogs citing

First cited: 14 Oct 2021
Most recent: 31 Jul 2025
Rank this month: not ranked
Links from this post: 22
Words captured: 1,428

Cited by

Blog

In the post

Date

Chainguard Blog

This Shit is Hard: SLSA L3 and Beyond Read at the source ↗

31 Jul 2025

Chainguard Blog

Chainguard joins Coalition for Secure AI with OpenAI, Google, Anthropic Read at the source ↗

18 Jul 2024

itvision.altervista.org

Linux Myths Series: Linux doesn't Need an Antivirus Read at the source ↗

1 Jun 2023

Chainguard Blog

Implementing Secure Software Supply Chain Security Controls: Understanding NIST SSDF & SLSA Frameworks Read at the source ↗

3 Aug 2022

labs.steren.fr

A Naive container base image update strategy Read at the source ↗

14 Oct 2021

Links from this post

Link

Host

https://www.sonatype.com/hubfs/Corporate/Software%20Supply%20Chain/2020/SON_SSSC-Report-2020_final_aug11.pdf

sonatype.com

https://www.solarwinds.com/sa-overview/securityadvisory

solarwinds.com

https://about.codecov.io/security-update/

about.codecov.io

https://github.com/slsa-framework/slsa

github.com

https://cloud.google.com/security/binary-authorization-for-borg

cloud.google.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiuGpVbHMZ5-LDbnSMAQ-yTIyD-ghWpj_J3eQGamf2BrgSHm5VsrHZmTkXTaJtWTFycMnALI5d-8wRRxtfgOvtuHByRXUqVONyZYZicxP8g14pNTYpZrco-ZBxy5lYvBBoXLUBg1DFhmhZNxYiRYWznXwLc84AKYK3nHFehxQIBS3QRFpIHyxXe9IKi/s690/slsa%20threas.png

blogger.googleusercontent.com

https://lore.kernel.org/lkml/202105051005.49BFABCE@keescook/

lore.kernel.org

https://news-web.php.net/php.internals/113838

news-web.php.net

https://www.webmin.com/exploit.html

webmin.com

https://www.crowdstrike.com/blog/sunspot-malware-technical-analysis/

crowdstrike.com

https://github.com/slsa-framework/slsa/blob/main/build-requirements.md

github.com

https://schneider.dev/blog/event-stream-vulnerability-explained/

schneider.dev

https://about.codecov.io/apr-2021-post-mortem/

about.codecov.io

https://theupdateframework.io/papers/attacks-on-package-managers-ccs2008.pdf

theupdateframework.io

https://blog.sonatype.com/damaging-linux-mac-malware-bundled-within-browserify-npm-brandjack-attempt

blog.sonatype.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmI1f1WgdZ2T_ELObJVYQ3E_3Z5fnQaCCr4VxHINJ2KKq3ifJ-tv4RYqdvRhfLjdOwmWRQvscNvEqoBoiOufb3TOO_cp8lV0wuUWmeNOPmHyNOPskuCkHb_9FyXtyX-xV29l9DtO90FClgJWcclSIzZt8YSoiR0Q1YJGfg7V4si2u5Fbe1rGX3SN_X/s1600/slsa%20levels.png

blogger.googleusercontent.com

https://slsa.dev/

slsa.dev

https://github.com/slsa-framework/github-actions-demo

github.com

https://github.com/marketplace/actions/slsa-build-provenance-action-demo

github.com

https://groups.google.com/g/slsa-discussion

groups.google.com

https://github.com/ossf/wg-digital-identity-attestation

github.com

Know, Prevent, Fix: A framework for shifting the discussion around vulnerabilities in open source Read at the source ↗

security.googleblog.com