SLSA for Success: Using SLSA to help achieve NIST’s SSDF
2022年6月15日 · We suggest Supply-chain Levels for Software Artifacts (SLSA, pronounced “salsa”) as an on-ramp for successful SSDF adoption. SLSA is a framework for supply chain …
SLSA • Supply-chain Levels for Software Artifacts
What is SLSA? Supply-chain Levels for Software Artifacts, or SLSA ("salsa"). It’s a security framework, a checklist of standards and controls to prevent tampering, improve integrity, and …
Google SLSA & NIST SSDF: Emerging Software Supply Chain Security Best Practices “Improving the Nation’s Cybersecurity (14028)” issued on May 12, 2021
2024年9月18日 · Require contractors to develop and maintain a software bill of materials (SBOM) for any software used in the performance of the contract regardless of whether there is any …
软件供应链安全中的SSDF框架到底是什么？ - CSDN博客
2022年9月7日 · nist 创建了所谓的安全软件开发框架(ssdf)，它描述了一组基于已建立的标准、指导和安全软件开发实践文档的高级实践。 或者简单地说，SSDF是一套成熟的SDLC标准模型。
Implementing Secure Software Supply Chain Security Controls ...
Secure your software supply chain with Chainguard's guide to NIST SSDF and SLSA implementation. Learn how to protect your software from vulnerabilities.
剖析Google SLSA供应链完整性框架 - CSDN博客
2023年12月24日 · 2023年4月19日开源安全基金会（ Open Source Security Foundation，OpenSSF）宣布发布 软件 工件供应链级别（Supply-chain Levels for Software …
遵守 SSDF、SLSA 和 FedRAMP 框架 - Scribe Security
Scribe 是第一个专注于 SSDF 内 PS（保护软件）实践组的解决方案 . Scribe 根据著名的 CIS 软件供应链安全基准，结合 SLSA 的一些要素，进行基于规则的评估，以确定源代码的保护级别。 …
关于 NIST SSDF 您需要了解的一切 - 指南 - Scribe Security
nist ssdf 及其涵盖的四个主要领域的细分; ssdf 发展回顾及其从建议到指令的快速转变; 另一个供应链安全框架 slsa 的优势; 成功的软件供应链安全所需的构建模块; 使用持续保证并跟踪 sdlc 中 …
SLSA – Open Source Security Foundation
SLSA is a set of incrementally adoptable guidelines for supply chain security, established by industry consensus. The specification set by SLSA is useful for both software producers and …