Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Clarify the value of L1 in the source track #1070

Closed
TomHennen opened this issue Jun 17, 2024 · 3 comments
Closed

Clarify the value of L1 in the source track #1070

TomHennen opened this issue Jun 17, 2024 · 3 comments
Labels
source-track

Comments

@TomHennen
Copy link
Contributor

There’ve been outstanding questions on the value of L1 given that most projects already use source control. This can definitely be clarified.
@TomHennen
Copy link
Contributor Author

If #1071 is resolved that might help clarify the L1 value? E.g. if L1 is about ensuring the communications infrastructure exists that might be equivalent to build level 1 requiring some provenance?

@joshuagl
Copy link
Member

If we end up with something closer to the objectives proposed in #1072, then we might consider L1 to be using an SCP w/ a PR workflow which produces provenance.

@zachariahcox zachariahcox mentioned this issue Aug 27, 2024
Closed
@zachariahcox
Copy link
Contributor

closing as a duplicate of #1112

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
source-track
Projects
Issue triage
Status: ✅ Done
SLSA Source Track
Status: Done
Milestone
No milestone
Development

No branches or pull requests
3 participants
@TomHennen @joshuagl @zachariahcox