Software Supply Chain · security identity · OpenSSF

SLSA

SLSA (Supply-chain Levels for Software Artifacts) is a security framework and specification of progressive levels for hardening software build and release pipelines. It defines requirements and provenance attestations to prevent tampering.

slsa.dev/The standard

OpenSSFGoverning body · Linux Foundation

2021First published

1.0 (2023)Current version

Yes — Protocol BuffersMachine-readable schema · open

0providers in the catalog

Also known as Supply-chain Levels for Software Artifacts.

Providers that carry SLSA 0

No provider in the catalog carries this standard as a tag yet. That is a statement about the catalog's tagging, not about adoption: a provider that implements SLSA and says so in its APIs.json profile appears here on the next build. Add or correct a listing.

Read from the API Evangelist standards directory, facts verified 2026-08-17. Provider links come from the catalog's own identity tags and are rebuilt nightly. If this page is wrong about a standard or a provider, say so.