SLSA says builds should run isolated. Can you prove yours did? Aug 19, 11am ET: Marina Moore & @puerco.mx show how to verify hermetic builds: cryptographic proof, full SBOM coverage, provenance to the exact VM that ran it. Powered by Cocoon in Edera Protect zones. edera.link/vev-820
edera.linkBuilt Clean. Receipts Attached.Security frameworks such as SLSA require software builds to run in isolated environments to guarantee they are “free of unintended external influence”. Except....
1 repost9 likes