@@ -5,13 +5,14 @@ is_guest_post: false
5
5
---
6
6
7
7
Today we’re releasing the [ SLSA Version 1.1 RC2] ( /spec/v1.1-rc2/ ) for
8
- public review. We are seeking comments on these spec changes by April
9
- 18, 2025. This release brings several changes aimed at enhancing the
8
+ public review. We are seeking comments on these spec changes by April
9
+ 18, 2025. This release brings several changes aimed at enhancing the
10
10
clarity and usability of the original specification. It also introduces
11
11
backwards-compatible clarifications to the SLSA threat model, attestation
12
12
model and verification procedure. This includes the addition of verifier
13
- metadata to the VSA format. Please, refer to the
14
- [ What's new] ( /spec/v1.1-rc2/whats-new ) section for further details.
13
+ metadata to the Verification Summary Attestation (VSA) format. Please,
14
+ refer to the [ What's new] ( /spec/v1.1-rc2/whats-new ) section for further
15
+ details.
15
16
16
17
What does this update mean for SLSA implimentors? Good news! This means
17
18
that SLSA 1.1 is backwards compatible with SLSA 1.0.
@@ -28,8 +29,8 @@ publication of a candidate for [Approved Specification] starts a 2 week
28
29
review period during which the community at large is invited to review the
29
30
draft and raise any issues. If you do find any issue, please, open an issue
30
31
on [ GitHub] . If no major issues are found during this review period the
31
- V1.1 RC2 draft will then be published as Version 1.1, the new [ Approved
32
- Specification] , effectively replacing Version 1.0.
32
+ V1.1 RC2 draft will then be published as Version 1.1, the new
33
+ [ Approved Specification] , effectively replacing Version 1.0.
33
34
34
35
[ Community Specification ] : https://github.com/CommunitySpecification/Community_Specification/blob/main/
35
36
[ GitHub ] : https://github.com/slsa-framework/slsa/issues
0 commit comments