SLSA
Source track: source control system requirements – SLSA

SLSA SS.6: Change history (Source L2 to L4)

The SCS must record every change to named references, with when it happened, who made it and the new revision identifier, so that the previous states of a branch, how and when they changed and how the current revision relates to earlier ones can be answered. Where revisions have ancestry, the SCS must allow a branch to move only to a descendant of its current revision (in git, a technical control forbidding force pushes). This evidences that the organization intended the changes.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Source track: source control system requirements – SLSA

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.