SLSA SLSA-DEP-2: Dependency Provenance Verification
Verify provenance and integrity of dependencies before they enter the build, using digests, signatures, or trusted registries.
Maintained by Gerard Blokdyk·Verified against the published standard ·Control text last updated Other controls in Dependency Track
Query this from an agent
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.