SLSA

Definitions

1. Supply-chain Levels for Software Artifacts (pronounced 'salsa') — a security framework with four levels of increasing rigor for protecting software build integrity. Level 1: documented build process. Level 2: hosted, authenticated builds. Level 3: hardened, reproducible builds. Level 4: all dependencies satisfy Level 4. Created by Google.

   In plain English: A security framework with escalating levels for ensuring your software build process hasn't been tampered with.

   Example: "We're targeting SLSA Level 3 — builds run on isolated infrastructure, produce signed provenance, and are reproducible from source."

Related Terms

• Dependency Confusion
• SBOM
• Sigstore
• Digital Signature
• HMAC
• Boot Integrity
• Code Signing
• Cryptographic Hash
• File Integrity Monitoring
• MITRE ATT&CK
• SBOM Analysis
• WORM Storage
• Anti-Cheat
• Data Tampering
• Fabrication Attack
• Grey Market
• Hardware Implant
• Log Integrity
• Procurement Security