/blog/2022/04/blog-launch 2022-04-08T00:00:00+00:00 /blog/2022/04/slsa-is-no-free-lunch 2022-04-11T00:00:00+00:00 /blog/2022/05/slsa-sbom 2022-05-02T00:00:00+00:00 /blog/2022/06/slsa-ssdf 2022-06-15T00:00:00+00:00 /blog/2022/06/slsa-github-workflows 2022-06-20T00:00:00+00:00 /blog/2022/07/slsa-foundational-framework 2022-07-25T00:00:00+00:00 /blog/2022/08/slsa-github-workflows-generic-ga 2022-08-29T00:00:00+00:00 /blog/2022/09/eo-in-plain-english 2022-09-26T00:00:00+00:00 /blog/2022/12/gcb-slsa-verification 2022-12-05T00:00:00+00:00 /blog/2023/02/slsa-github-workflows-container-ga 2023-02-01T00:00:00+00:00 /blog/2023/02/slsa-v1-rc 2023-02-24T00:00:00+00:00 /blog/2023/04/the-breadth-and-depth-of-slsa 2023-04-03T00:00:00+00:00 /blog/2023/04/slsa-v1-rc2 2023-04-04T00:00:00+00:00 /blog/2023/04/slsa-v1-final 2023-04-19T00:00:00+00:00 /blog/2023/05/in-toto-and-slsa 2023-05-02T00:00:00+00:00 /blog/2023/05/bringing-improved-supply-chain-security-to-the-nodejs-ecosystem 2023-05-11T00:00:00+00:00 /blog/2023/06/slsa-github-workflows-container-based 2023-06-13T00:00:00+00:00 /blog/2023/08/bring-your-own-builder-github 2023-08-28T00:00:00+00:00 /blog/2024/04/tekton-chains-ibm-devsecops 2024-04-16T00:00:00+00:00 /blog/2024/08/dep-confusion-and-typosquatting 2024-08-13T00:00:00+00:00 /blog/2025/04/slsa-v1.1-rc2 2025-04-04T00:00:00+00:00 /blog/2025/04/slsa-v1.1 2025-04-21T00:00:00+00:00 /blog/2025/04/slsa-source-sprint 2025-04-29T00:00:00+00:00 /blog/2025/06/slsa-v1.2-rc1 2025-06-20T00:00:00+00:00 /blog/2025/07/slsa-e2e 2025-07-22T00:00:00+00:00 /blog/2025/10/slsa-e2e-with-ampel 2025-10-21T00:00:00+00:00 /blog/2025/11/slsa-v1.2-rc2 2025-11-10T00:00:00+00:00 /blog/2025/11/announce-slsa-v1.2 2025-11-24T00:00:00+00:00 /blog/2025/12/supply-chain-robots-slsa 2025-12-18T00:00:00+00:00 /spec/draft/about /spec/v1.0-rc2/about /spec/v1.0/about /spec/v1.1-rc1/about /spec/v1.1-rc2/about /spec/v1.1/about /spec/v1.2-rc1/about /spec/v1.2-rc2/about /spec/v1.2/about /spec/draft/assessing-build-platforms /spec/v1.2-rc1/assessing-build-platforms /spec/v1.2-rc2/assessing-build-platforms /spec/v1.2/assessing-build-platforms /spec/draft/assessing-source-systems /spec/v1.2-rc1/assessing-source-systems /spec/v1.2-rc2/assessing-source-systems /spec/v1.2/assessing-source-systems /spec/draft/attestation-model /spec/v0.1/attestation-model /spec/v0.2/attestation-model /spec/v1.0-rc1/attestation-model /spec/v1.0-rc2/attestation-model /spec/v1.0/attestation-model /spec/v1.1-rc1/attestation-model /spec/v1.1-rc2/attestation-model /spec/v1.1/attestation-model /spec/v1.2-rc1/attestation-model /spec/v1.2-rc2/attestation-model /spec/v1.2/attestation-model /attestation-model /blog /spec/draft/build-env-track-basics /spec/draft/build-provenance /spec/v1.2-rc1/build-provenance /spec/v1.2-rc2/build-provenance /spec/v1.2/build-provenance /spec/draft/build-requirements /spec/v1.2-rc1/build-requirements /spec/v1.2-rc2/build-requirements /spec/v1.2/build-requirements /spec/draft/build-track-basics /spec/v1.2-rc1/build-track-basics /spec/v1.2-rc2/build-track-basics /spec/v1.2/build-track-basics /community /current-activities /spec/draft/dependency-track /spec/draft/distributing-provenance /spec/v1.0-rc2/distributing-provenance /spec/v1.0/distributing-provenance /spec/v1.1-rc1/distributing-provenance /spec/v1.1-rc2/distributing-provenance /spec/v1.1/distributing-provenance /spec/v1.2-rc1/distributing-provenance /spec/v1.2-rc2/distributing-provenance /spec/v1.2/distributing-provenance /spec/draft/faq /spec/v0.1/faq /spec/v1.0-rc1/faq /spec/v1.0-rc2/faq /spec/v1.0/faq /spec/v1.1-rc1/faq /spec/v1.1-rc2/faq /spec/v1.1/faq /spec/v1.2-rc1/faq /spec/v1.2-rc2/faq /spec/v1.2/faq /spec/draft/future-directions /spec/v1.0-rc2/future-directions /spec/v1.0/future-directions /spec/v1.1-rc1/future-directions /spec/v1.1-rc2/future-directions /spec/v1.1/future-directions /spec/v1.2-rc1/future-directions /spec/v1.2-rc2/future-directions /spec/v1.2/future-directions /how-to/get-started /how-to/how-to-infra /how-to/how-to-orgs /how-to/ /notes/ /spec/draft/ /spec/v0.1/ /spec/v1.0-rc2/ /spec/v1.0/ /spec/v1.1-rc1/ /spec/v1.1-rc2/ /spec/v1.1/ /spec/v1.2-rc1/ /spec/v1.2-rc2/ /spec/v1.2/ / /spec/v0.1/levels /spec/v1.0-rc2/levels /spec/v1.0/levels /spec/v1.1-rc1/levels /spec/v1.1-rc2/levels /spec/v1.1/levels /spec/draft/onepage /spec/v0.1/onepage /spec/v1.0-rc1/onepage /spec/v1.0-rc2/onepage /spec/v1.0/onepage /spec/v1.1-rc1/onepage /spec/v1.1-rc2/onepage /spec/v1.1/onepage /spec/v1.2-rc1/onepage /spec/v1.2-rc2/onepage /spec/v1.2/onepage /spec/draft/principles /spec/v1.0-rc2/principles /spec/v1.0/principles /spec/v1.1-rc1/principles /spec/v1.1-rc2/principles /spec/v1.1/principles /spec/v1.2-rc1/principles /spec/v1.2-rc2/principles /spec/v1.2/principles /spec/draft/provenance /spec/v0.1/provenance /spec/v0.2/provenance /spec/v1.0-rc1/provenance /spec/v1.0-rc2/provenance /spec/v1.0/provenance /spec/v1.1-rc1/provenance /spec/v1.1-rc2/provenance /spec/v1.1/provenance /spec/v1.2-rc1/provenance /spec/v1.2-rc2/provenance /spec/v1.2/provenance /spec/draft/requirements /spec/v0.1/requirements /spec/v1.0-rc1/requirements /spec/v1.0-rc2/requirements /spec/v1.0/requirements /spec/v1.1-rc1/requirements /spec/v1.1-rc2/requirements /spec/v1.1/requirements /spec/v1.2-rc1/requirements /spec/v1.2-rc2/requirements /spec/v1.2/requirements /spec/draft/source-example-controls /spec/v1.2-rc2/source-example-controls /spec/v1.2/source-example-controls /spec/draft/source-requirements /spec/v1.2-rc1/source-requirements /spec/v1.2-rc2/source-requirements /spec/v1.2/source-requirements /spec/draft/source-track-assessment /spec/draft/source-track-basics /spec/draft/source-track-controls /spec/draft/source-track-provenance /spec/draft/source-track-requirements /spec/draft/source-track-verification /spec-stages /spec/draft/terminology /spec/v0.1/terminology /spec/v1.0-rc1/terminology /spec/v1.0-rc2/terminology /spec/v1.0/terminology /spec/v1.1-rc1/terminology /spec/v1.1-rc2/terminology /spec/v1.1/terminology /spec/v1.2-rc1/terminology /spec/v1.2-rc2/terminology /spec/v1.2/terminology /spec/draft/threats-overview /spec/v1.0-rc2/threats-overview /spec/v1.0/threats-overview /spec/v1.1-rc1/threats-overview /spec/v1.1-rc2/threats-overview /spec/v1.1/threats-overview /spec/v1.2-rc1/threats-overview /spec/v1.2-rc2/threats-overview /spec/v1.2/threats-overview /spec/draft/threats /spec/v0.1/threats /spec/v1.0-rc1/threats /spec/v1.0-rc2/threats /spec/v1.0/threats /spec/v1.1-rc1/threats /spec/v1.1-rc2/threats /spec/v1.1/threats /spec/v1.2-rc1/threats /spec/v1.2-rc2/threats /spec/v1.2/threats /spec/draft/tracks /spec/v1.2-rc1/tracks /spec/v1.2-rc2/tracks /spec/v1.2/tracks /spec/draft/use-cases /spec/v0.1/use-cases /spec/v1.0-rc1/use-cases /spec/v1.0-rc2/use-cases /spec/v1.0/use-cases /spec/v1.1-rc1/use-cases /spec/v1.1-rc2/use-cases /spec/v1.1/use-cases /spec/v1.2-rc1/use-cases /spec/v1.2-rc2/use-cases /spec/v1.2/use-cases /spec/draft/verification_summary /spec/v0.1/verification_summary /spec/v0.2/verification_summary /spec/v1.0-rc2/verification_summary /spec/v1.0/verification_summary /spec/v1.1-rc1/verification_summary /spec/v1.1-rc2/verification_summary /spec/v1.1/verification_summary /spec/v1.2-rc1/verification_summary /spec/v1.2-rc2/verification_summary /spec/v1.2/verification_summary /spec/draft/verified-properties /spec/draft/verifying-artifacts /spec/v1.0-rc2/verifying-artifacts /spec/v1.0/verifying-artifacts /spec/v1.1-rc1/verifying-artifacts /spec/v1.1-rc2/verifying-artifacts /spec/v1.1/verifying-artifacts /spec/v1.2-rc1/verifying-artifacts /spec/v1.2-rc2/verifying-artifacts /spec/v1.2/verifying-artifacts /spec/draft/verifying-source /spec/v1.2-rc1/verifying-source /spec/v1.2-rc2/verifying-source /spec/v1.2/verifying-source /spec/v1.0-rc2/verifying-systems /spec/v1.0/verifying-systems /spec/v1.1-rc1/verifying-systems /spec/v1.1-rc2/verifying-systems /spec/v1.1/verifying-systems /spec/draft/whats-new /spec/v1.0-rc2/whats-new /spec/v1.0/whats-new /spec/v1.1-rc1/whats-new /spec/v1.1-rc2/whats-new /spec/v1.1/whats-new /spec/v1.2-rc1/whats-new /spec/v1.2-rc2/whats-new /spec/v1.2/whats-new /spec/v1.0-rc1/future-directions /spec/v1.0-rc1/ /spec/v1.0-rc1/levels /spec/v1.0-rc1/principles /spec/v1.0-rc1/verifying-artifacts /spec/v1.0-rc1/verifying-systems /spec/v1.0-rc1/whats-new