Supply Chain & Provenance
2 links sigstore.dev 
Tool
sigstore
![sigstore logo][logo]
sigstore.dev Jul 2026
slsa.dev 
Resource
Supply-chain Levels for Software Artifacts
SLSA is a security framework. It is a check-list of standards and controls to prevent tampering, improve integrity, and secure packages and infrastructure in your projects, businesses or enterprises. It’s how you get from safe enough to being as resilient as possible, at any link in the chain.
slsa.dev Jul 2026