SLSA Framework

Supply-chain Levels for Software Artifacts