SLSA
Build track: producer requirements – SLSA

SLSA BP.1: Choose an appropriate build platform (Build L1 to L3)

What does BP.1 require?

The producer must pick a build platform capable of reaching the Build level it wants to claim: an artifact can only be offered at Build L3 if the builder that produced it can issue Build L3 provenance. The producer adopts any controls the chosen platform specifies for that level.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Build track: producer requirements – SLSA

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll SLSA controls