Securing the software supply chain with the SLSA framework
Summary: The SLSA framework, whose version 1.0 was released in April 2023, uses a signed provenance file to attest how a binary, container image, or other artifact was built from source, with Build Levels 1 through 3 adding signing, dedicated infrastructure, and hardening against provenance forgery. Trail of Bits engineers drafted PEP 740 to add SLSA provenance support to PyPI using trusted publishing and Sigstore keyless signatures, while npm already summarizes provenance on package pages and verifies it through the npm audit signatures command.
Why it matters: An attacker who steals package upload credentials for a project that normally ships signed Level 3 provenance could upload an artifact with unsigned Level 1 provenance, and the source notes there is still no agreed convention for handling such level downgrades in publishing and distribution tools.
Read the original at Trail of Bits Blog ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026